CVE-2021-27191

Name of the Vulnerable Software and Affected Versions: get-ip-range versions prior to 4.0.0

Description: The issue allows for denial of service (DoS) if the range is untrusted input. An attacker could send a large range, such as 128.0.0.0/1, that causes resource exhaustion.

Recommendations: Update the get-ip-range dependency to 4.0.0 or above. As a temporary workaround, consider validating and sanitizing the input range to prevent large, untrusted inputs from causing resource exhaustion. Restrict access to the get-ip-range package until the issue is resolved.