Parse-url Project

Records6All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Parse-url Project records in CISA KEV

No Parse-url Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

6 records in Parse-url · all components

TI-2022-02046 CVE-2022-2216 · GHSA-7f3x-x4pr-wqhj

MEDIUM 46

Server-Side Request Forgery (SSRF) in GitHub repository ionicabizau/parse-url prior to 7.0.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01743 Published 2022-06-27 Fixed in 7.0.0, 6.0.1 CWE-918

TI-2022-02689 CVE-2022-2900 · GHSA-j9fq-vwqv-2fm2

MEDIUM 42

Server-Side Request Forgery (SSRF) in GitHub repository ionicabizau/parse-url prior to 8.1.0.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.01239 Published 2022-09-14 Fixed in 8.1.0 CWE-918

TI-2022-00635 CVE-2022-0722 · GHSA-4p35-cfcx-8653

LOW 35

Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository ionicabizau/parse-url prior to 7.0.0.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01169 Published 2022-06-27 Partial fix · 7.0.0, 6.0.1 CWE-200

TI-2022-02979 CVE-2022-3224 · GHSA-pqw5-jmp5-px4v

LOW 29

Misinterpretation of Input in GitHub repository ionicabizau/parse-url prior to 8.1.0.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00794 Published 2022-09-15 Fixed in 8.1.0 CWE-115

TI-2022-02048 CVE-2022-2218 · GHSA-jpp7-7chh-cf67

LOW 29

Cross-site Scripting (XSS) - Stored in GitHub repository ionicabizau/parse-url prior to 7.0.0.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00907 Published 2022-06-27 Fixed in 7.0.0, 6.0.1 CWE-79

TI-2022-02047 CVE-2022-2217 · GHSA-q6wq-5p59-983w

LOW 29

Cross-site Scripting (XSS) - Generic in GitHub repository ionicabizau/parse-url prior to 7.0.0.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01011 Published 2022-06-27 Partial fix · 7.0.0, 6.0.1 CWE-79