CVE-2016-10594: Ipip Project Ipip

High severity, CVSS 8.1. EPSS: 0.6% chance of exploitation in the next 30 days.

ipip is a Node.js module to query geolocation information for an IP or domain, based on database by ipip.net. ipip downloads data resources over HTTP, which leaves it vulnerable to MITM attacks.

Affected products

Published 2018-06-01. Last modified 2026-06-17.