Browse CVEs

MEDIUM 6.1 CVE-2022-1243 CRHTLF can lead to invalid protocol extraction potentially leading to XSS in GitHub repository medialize/uri.js prior to 1.19.11. Uri.js 1.19.11+ Fix from $1,6002022-04-05 MEDIUM 6.1 CVE-2022-1233 URL Confusion When Scheme Not Supplied in GitHub repository medialize/uri.js prior to 1.19.11. Uri.js 1.19.11+ Fix from $1,6002022-04-04 MEDIUM 6.1 CVE-2022-0868 Open Redirect in GitHub repository medialize/uri.js prior to 1.19.10. Uri.js 1.19.10+ Fix from $1,6002022-03-06 MEDIUM 5.3 CVE-2022-24723 URI.js is a Javascript URL mutation library. Before version 1.19.9, whitespace characters are not removed from the beginning of the protocol, so URLs… Uri.js 1.19.9+ Fix from $1,6002022-03-03 MEDIUM 6.1 CVE-2021-3647 URI.js is vulnerable to URL Redirection to Untrusted Site Uri.js 1.19.7+ Fix from $1,6002021-07-16 HIGH 7.5 CVE-2021-27516 URI.js (aka urijs) before 1.19.6 mishandles certain uses of backslash such as http:\/ and interprets the URI as a relative path. Uri.js 1.19.6+ Fix from $1,9502021-02-22 MEDIUM 6.5 CVE-2020-26291 URI.js is a javascript URL mutation library (npm package urijs). In URI.js before version 1.19.4, the hostname can be spoofed by using a backslash (`… Uri.js 1.19.4+ Fix from $1,6002020-12-31