SSRF Bypass in private-ip

[svrnwnsch]

Hey there seems to be SSRF Bypass in private-ip as the multicast address 224.0.0.0/4 seems to be not included according to the reporting in:
https://gist.github.com/lirantal/ed18a4493ca9fe4429957c79454a9df1
GHSA-9h3q-32c7-r533

[svrnwnsch]

For others stumbling on this problem I switched to https://github.com/whitequark/ipaddr.js as a replacement which also allows for checking ip ranges.