Browse CVEs

CRITICAL 9.8 CVE-2022-0691 Authorization Bypass Through User-Controlled Key in NPM url-parse prior to 1.5.9. Url Parse 1.5.9+ Fix from $2,3002022-02-21 CRITICAL 9.1 CVE-2022-0686 Authorization Bypass Through User-Controlled Key in NPM url-parse prior to 1.5.8. Url Parse 1.5.8+ Fix from $2,3002022-02-20 MEDIUM 5.3 CVE-2022-0639 Authorization Bypass Through User-Controlled Key in NPM url-parse prior to 1.5.7. Url Parse 1.5.7+ Fix from $1,6002022-02-17 MEDIUM 5.3 CVE-2022-0512 Authorization Bypass Through User-Controlled Key in NPM url-parse prior to 1.5.6. Url Parse 1.5.6+ Fix from $1,6002022-02-14 MEDIUM 5.3 CVE-2021-3664 url-parse is vulnerable to URL Redirection to Untrusted Site Url Parse 1.5.2+ Fix from $1,6002021-07-26 MEDIUM 5.3 CVE-2021-27515 url-parse before 1.5.0 mishandles certain uses of backslash such as http:\/ and interprets the URI as a relative path. Url Parse 1.5.0+ Fix from $1,6002021-02-22 MEDIUM 5.3 CVE-2020-8124 Insufficient validation and sanitization of user input exists in url-parse npm package version 1.4.4 and earlier may allow attacker to bypass securit… Url Parse after 1.4.4 Fix from $1,6002020-02-04 CRITICAL 10.0 CVE-2018-3774 Incorrect parsing in url-parse <1.4.3 returns wrong hostname which leads to multiple vulnerabilities such as SSRF, Open Redirect, Bypass Authenticati… Url Parse 1.4.3+ Fix from $2,3002018-08-12