GCVE-110-NPM-2026-029809

Advisory Published

Vulnetix · Advisory published July 1, 2026

[IOC-STIX-MATCH] Malicious IP address 70.0.0.1 — referenced in @linkforty/core/scripts.js — matched: headers: { 'true-client-ip': '203.0.113.50, 70.0.0.1' },

Download JSON Open in Console

Weaknesses (CWE)

CWE-506Embedded Malicious CodeCWE-200Exposure of Sensitive Information to an Unauthorized Actor

Affected Products

Vendor	Product	Versions	Platforms
npm	@linkforty/core	* (affected)	—

References

advisory

web

Browse GCVE Records

74,352 records in the GCVE database · Updated July 22, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON