Possible bundled ip-address affected by CVE-2026-69192 (SSRF via octal/decimal parsing mismatch)

Title: Possible bundled ip-address affected by CVE-2026-69192 (SSRF via octal/decimal parsing mismatch)

Body:

Our container image scan (Trivy) flags ip-address@10.2.0 as HIGH severity — CVE-2026-69192: Address4 decodes leading-zero octets as decimal while resolvers decode them as octal, allowing SSRF and trust-boundary bypass. Fixed in ip-address@10.3.1.

The finding shows up in our Docker image scan but not in any package-lock.json in our own dependency tree, and doesn't appear as a dependency of @openai/codex or opencode-ai either (both ship as compiled native binaries with no npm content). @anthropic-ai/claude-code is the remaining candidate — it's a Bun-compiled single-file executable that bundles its own JS, the same reason picomatch@4.0.3 was flagged and tracked in #52801. We weren't able to confirm this conclusively via string inspection of the compiled binary (Bun bundles are minified/compressed), so flagging this as a probable source rather than a certain one.

Could someone confirm whether claude-code bundles ip-address, and if so, whether a patch release picking up 10.3.1+ is possible?

Filed to track on our side — happy to share more context if useful.