Skip to content
OpenAdvisories

Package · npm

urijs

8 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.2
    CVE-2022-1243

    CRHTLF can lead to invalid protocol extraction potentially leading to XSS in medialize/uri.js

    CRHTLF can lead to invalid protocol extraction potentially leading to XSS in GitHub repository medialize/uri.js prior to 1.19.11.

    medialize medialize/URI.js urijs npm
  • High 8.0
    CVE-2022-0868

    Open Redirect in medialize/uri.js

    Open Redirect in GitHub repository medialize/uri.js prior to 1.19.10.

    medialize medialize/URI.js urijs npm
  • High 7.5
    CVE-2021-27516

    URIjs Hostname spoofing via backslashes in URL

    URI.js (aka urijs) before 1.19.6 mishandles certain uses of backslash such as http:\/ and interprets the URI as a relative path.

    urijs npm