The fact that there are still octal-supporting parsers in the wild means that it is a security bug to accept 0-prefixed addresses as decimal, since they will produce a different valid value.

All the other questions are much safer since they will at worst produce a failure, but it would probably be best to be extra-strict for them too.