Vulnerability index

Browse CVEs

7 matching

Cards Compact

Filters 1 Clear all

Keyword

Severity

Any Critical High Medium Low

Technology

Recency

Analysis

Fix

Sort

Exploited (KEV) only

Filters apply as you choose them.

Uri.js MEDIUM 6.1

CVE-2022-1243

CRHTLF can lead to invalid protocol extraction potentially leading to XSS in GitHub repository medialize/uri.js prior to 1.19.11.

Fix: 1.19.11+

Fix from $1,600 2022-04-05

Uri.js MEDIUM 6.1

CVE-2022-1233

URL Confusion When Scheme Not Supplied in GitHub repository medialize/uri.js prior to 1.19.11.

Fix: 1.19.11+

Fix from $1,600 2022-04-04

Uri.js MEDIUM 6.1

CVE-2022-0868

Open Redirect in GitHub repository medialize/uri.js prior to 1.19.10.

Fix: 1.19.10+

Fix from $1,600 2022-03-06

Uri.js MEDIUM 5.3

CVE-2022-24723

URI.js is a Javascript URL mutation library. Before version 1.19.9, whitespace characters are not removed from the beginning of the protocol, so URLs…

Fix: 1.19.9+

Fix from $1,600 2022-03-03

Uri.js MEDIUM 6.1

CVE-2021-3647

URI.js is vulnerable to URL Redirection to Untrusted Site

Fix: 1.19.7+

Fix from $1,600 2021-07-16

Uri.js HIGH 7.5

CVE-2021-27516

URI.js (aka urijs) before 1.19.6 mishandles certain uses of backslash such as http:\/ and interprets the URI as a relative path.

Fix: 1.19.6+

Fix from $1,950 2021-02-22

Uri.js MEDIUM 6.5

CVE-2020-26291

URI.js is a javascript URL mutation library (npm package urijs). In URI.js before version 1.19.4, the hostname can be spoofed by using a backslash (`…

Fix: 1.19.4+

Fix from $1,600 2020-12-31