Description
The slashify package 1.0.0 for Node.js allows open-redirect attacks, as demonstrated by a localhost:3000///example.com/ substring.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | slashify | <= 1.0.0 | — | GHSA-f4hq-453j-p95f |
Medium · 6.1
CVE-2021-3189
EUVD-2021-0547GHSA-f4hq-453j-p95f
Open redirect in Slashify
Published Feb 19, 2021 · Updated Aug 3, 2024 · Assigned by mitre