Tia N.List

Reported by 2 outlets

Node.js proxy-addr Module Critical Vulnerability CVE-2026-90711

hot0.0
Why this score
Breadth
1.00 / 2.0 · 2 sources
Authority
1.00 / 2.0 · best outlet weight
Severity
1.00 / 5.0 · CVSS + content signals
Velocity
0.00 / 2.0 · updates in 48h
Pickup speed
0.29 / 0.6 · time to second source
Recency
× 0.00 temporal multiplier
Community
+ 0.00 / 1.5 · reddit signal
Score
0.0 / 10 = base × recency + community
thehackerwire.comsecurityonline.info CVE-2026-90711 first seen 28d ago

Timeline

  1. original reporting

    🔴 CVE-2026-90711 - Critical (9.1) proxy-addr is a Node.js module that determines a request's client address behind trusted reverse proxies,

    www.thehackerwire.com · 28d ago · September 15th, 2026

    🔴 CVE-2026-90711 - Critical (9.1) proxy-addr is a Node.js module that determines a request's client address behind trusted reverse proxies,

    via Mastodon https://www.thehackerwire.com/vulnerability/CVE-2026-90711/

  2. update from securityonline.info

    A critical proxy-addr IP spoofing flaw (CVE-2026-90711) exposes Node.js apps to access control bypasses. Patch this proxy-addr IP spoofing b

    securityonline.info · 28d ago · September 16th, 2026

    A critical proxy-addr IP spoofing flaw (CVE-2026-90711) exposes Node.js apps to access control bypasses. Patch this proxy-addr IP spoofing b

    via Mastodon http://securityonline.info/proxy-addr-ip-spoofing-flaw/?utm_source=mastodon&utm_medium=jetpack_social

Covered in

digest 2026-09-16

Source on GitHub