Vulnerabilities

TI-2022-02046 CVE-2022-2216 · GHSA-7f3x-x4pr-wqhj

Server-Side Request Forgery (SSRF) in ionicabizau/parse-url

MEDIUM 46

Server-Side Request Forgery (SSRF) in GitHub repository ionicabizau/parse-url prior to 7.0.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01743 Published 2022-06-27 Fixed in 7.0.0, 6.0.1 CWE-918

TI-2022-02048 CVE-2022-2218 · GHSA-jpp7-7chh-cf67

LOW 29

Cross-site Scripting (XSS) - Stored in GitHub repository ionicabizau/parse-url prior to 7.0.0.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00907 Published 2022-06-27 Fixed in 7.0.0, 6.0.1 CWE-79

TI-2022-00635 CVE-2022-0722 · GHSA-4p35-cfcx-8653

LOW 35

Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository ionicabizau/parse-url prior to 7.0.0.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01169 Published 2022-06-27 Partial fix · 7.0.0, 6.0.1 CWE-200

TI-2022-02047 CVE-2022-2217 · GHSA-q6wq-5p59-983w

LOW 29

Cross-site Scripting (XSS) - Generic in GitHub repository ionicabizau/parse-url prior to 7.0.0.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01011 Published 2022-06-27 Partial fix · 7.0.0, 6.0.1 CWE-79