TI-2022-00605 CVE-2022-0691 · GHSA-jf5r-8hm2-f872
Authorization Bypass Through User-Controlled Key in unshiftio/url-parse
Priority MEDIUM 46
Authorization Bypass Through User-Controlled Key in NPM url-parse prior to 1.5.9.
Vulnerabilities
8 records
TI-2022-00600 CVE-2022-0686 · GHSA-hgjh-723h-mx2j
Authorization Bypass Through User-Controlled Key in unshiftio/url-parse
Priority MEDIUM 43
Authorization Bypass Through User-Controlled Key in NPM url-parse prior to 1.5.8.
TI-2022-00556 CVE-2022-0639 · GHSA-8v38-pw62-9cw2
Authorization Bypass Through User-Controlled Key in unshiftio/url-parse
Priority LOW 27
Authorization Bypass Through User-Controlled Key in NPM url-parse prior to 1.5.7.
TI-2022-00432 CVE-2022-0512 · GHSA-rqff-837h-mm52
Authorization Bypass Through User-Controlled Key in unshiftio/url-parse
Priority LOW 28
Authorization Bypass Through User-Controlled Key in NPM url-parse prior to 1.5.6.
TI-2021-02606 CVE-2021-3664 · GHSA-hh27-ffr2-f2jc
Open Redirect in unshiftio/url-parse
Priority LOW 28
url-parse is vulnerable to URL Redirection to Untrusted Site
TI-2021-08995 CVE-2021-27515 · GHSA-9m6j-fcg5-2442
url-parse before 1.5.0 mishandles certain uses of backslash such as http:\/ and interprets the URI as a relative path.
Priority LOW 28
url-parse before 1.5.0 mishandles certain uses of backslash such as http:\/ and interprets the URI as a relative path.
TI-2020-06542 CVE-2020-8124 · GHSA-46c4-8wrp-j99v
Improper input validation in url-parse
Priority LOW 27
Insufficient validation and sanitization of user input exists in url-parse npm package version 1.4.4 and earlier may allow attacker to bypass security checks.
TI-2018-02768 CVE-2018-3774 · GHSA-pv4c-p2j5-38j4
Open redirect in HackerOne url-parse
Priority MEDIUM 49
Incorrect parsing in url-parse <1.4.3 returns wrong hostname which leads to multiple vulnerabilities such as SSRF, Open Redirect, Bypass Authentication Protocol.