Vulnerability index

Browse CVEs

8 matching

Cards Compact

Filters 1 Clear all

Keyword

Severity

Any Critical High Medium Low

Technology

Recency

Analysis

Fix

Sort

Exploited (KEV) only

Filters apply as you choose them.

Url Parse CRITICAL 9.8

Authorization Bypass Through User-Controlled Key in NPM url-parse prior to 1.5.9.

Fix from $2,300 2022-02-21

Url Parse CRITICAL 9.1

Authorization Bypass Through User-Controlled Key in NPM url-parse prior to 1.5.8.

Fix from $2,300 2022-02-20

Url Parse MEDIUM 5.3

Authorization Bypass Through User-Controlled Key in NPM url-parse prior to 1.5.7.

Fix from $1,600 2022-02-17

Url Parse MEDIUM 5.3

Authorization Bypass Through User-Controlled Key in NPM url-parse prior to 1.5.6.

Fix from $1,600 2022-02-14

Url Parse MEDIUM 5.3

url-parse is vulnerable to URL Redirection to Untrusted Site

Fix from $1,600 2021-07-26

Url Parse MEDIUM 5.3

url-parse before 1.5.0 mishandles certain uses of backslash such as http:\/ and interprets the URI as a relative path.

Fix from $1,600 2021-02-22

Url Parse MEDIUM 5.3

Insufficient validation and sanitization of user input exists in url-parse npm package version 1.4.4 and earlier may allow attacker to bypass securit…

Fix: after 1.4.4

Fix from $1,600 2020-02-04

Url Parse CRITICAL 10.0

Incorrect parsing in url-parse <1.4.3 returns wrong hostname which leads to multiple vulnerabilities such as SSRF, Open Redirect, Bypass Authenticati…

Fix from $2,300 2018-08-12