node-url-parse

6 results · Clear filters · Feed

• Medium 6.5
  CVE-2022-0691

  Authorization Bypass Through User-Controlled Key in unshiftio/url-parse

  Authorization Bypass Through User-Controlled Key in NPM url-parse prior to 1.5.9.

  unshiftio unshiftio/url-parse url-parse node-url-parse Debian Ubuntu npm
  Feb 21, 2022
• Medium 6.5
  CVE-2022-0686

  Authorization Bypass Through User-Controlled Key in unshiftio/url-parse

  Authorization Bypass Through User-Controlled Key in NPM url-parse prior to 1.5.8.

  unshiftio unshiftio/url-parse url-parse node-url-parse Debian Ubuntu npm
  Feb 20, 2022
• Medium 6.5
  CVE-2022-0639

  Authorization Bypass Through User-Controlled Key in unshiftio/url-parse

  Authorization Bypass Through User-Controlled Key in NPM url-parse prior to 1.5.7.

  unshiftio unshiftio/url-parse url-parse node-url-parse Debian Ubuntu npm
  Feb 17, 2022
• Medium 5.3
  CVE-2021-3664

  Open Redirect in unshiftio/url-parse

  url-parse is vulnerable to URL Redirection to Untrusted Site

  unshiftio unshiftio/url-parse node-url-parse url-parse Debian Ubuntu npm
  Jul 26, 2021
• Medium 5.3
  CVE-2021-27515

  Path traversal in url-parse

  url-parse before 1.5.0 mishandles certain uses of backslash such as http:\/ and interprets the URI as a relative path.

  url-parse node-url-parse node-url-parse Debian Ubuntu npm
  Feb 21, 2021
• Medium 5.3
  CVE-2020-8124

  Improper Validation and Sanitization in url-parse

  Insufficient validation and sanitization of user input exists in url-parse npm package version 1.4.4 and earlier may allow attacker to bypass security checks.

  url-parse node-url-parse node-url-parse Debian Ubuntu npm
  Feb 4, 2020