node-url-parse - security update

Fixed packages 1

Vulnerabilities 6

• High 8.8
  CVE-2022-0512

  Authorization Bypass Through User-Controlled Key in unshiftio/url-parse

  Authorization Bypass Through User-Controlled Key in NPM url-parse prior to 1.5.6.

  unshiftio unshiftio/url-parse url-parse node-url-parse Debian Ubuntu npm
  Feb 14, 2022
• Medium 6.5
  CVE-2022-0639

  Authorization Bypass Through User-Controlled Key in unshiftio/url-parse

  Authorization Bypass Through User-Controlled Key in NPM url-parse prior to 1.5.7.

  unshiftio unshiftio/url-parse url-parse node-url-parse Debian Ubuntu npm
  Feb 17, 2022
• Medium 6.5
  CVE-2022-0686

  Authorization Bypass Through User-Controlled Key in unshiftio/url-parse

  Authorization Bypass Through User-Controlled Key in NPM url-parse prior to 1.5.8.

  unshiftio unshiftio/url-parse url-parse node-url-parse Debian Ubuntu npm
  Feb 20, 2022
• Medium 6.5
  CVE-2022-0691

  Authorization Bypass Through User-Controlled Key in unshiftio/url-parse

  Authorization Bypass Through User-Controlled Key in NPM url-parse prior to 1.5.9.

  unshiftio unshiftio/url-parse url-parse node-url-parse Debian Ubuntu npm
  Feb 21, 2022
• Medium 5.3
  CVE-2021-27515

  Path traversal in url-parse

  url-parse before 1.5.0 mishandles certain uses of backslash such as http:\/ and interprets the URI as a relative path.

  url-parse node-url-parse node-url-parse Debian Ubuntu npm
  Feb 21, 2021
• Medium 5.3
  CVE-2021-3664

  Open Redirect in unshiftio/url-parse

  url-parse is vulnerable to URL Redirection to Untrusted Site

  unshiftio unshiftio/url-parse node-url-parse url-parse Debian Ubuntu npm
  Jul 26, 2021