A flaw was found in ip-address. A remote attacker can cause a Denial of Service (DoS) by providing specially crafted input containing excessive percent characters to an application parsing IPv6 addresses. When processed by the Address6 constructor, inefficient parsing logic leads to high CPU consumption and application unresponsiveness.