Url Parse Project Url Parse vulnerabilities
8 vulnerabilities
Known vulnerabilities in Url Parse Project Url Parse, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2018-3774debiannode-url-parse+4
EPSS score3.81%
Incorrect parsing in url-parse <1.4.3 returns wrong hostname which leads to multiple vulnerabilities such as SSRF, Open Redirect, Bypass Authentication Protocol.CVE-2021-27515debiannode-url-parse+3EPSS score1.96%
url-parse before 1.5.0 mishandles certain uses of backslash such as http:\/ and interprets the URI as a relative path.CVE-2021-3664debiannode-url-parse+4EPSS score2.12%
url-parse is vulnerable to URL Redirection to Untrusted SiteCVE-2020-8124debiannode-url-parse+3EPSS score1.65%
Insufficient validation and sanitization of user input exists in url-parse npm package version 1.4.4 and earlier may allow attacker to bypass security checks.CVE-2022-0512debiannode-url-parse+4EPSS score1.78%
Authorization Bypass Through User-Controlled Key in NPM url-parse prior to 1.5.6.CVE-2022-0691debiannode-url-parse+4EPSS score2.22%
Authorization Bypass Through User-Controlled Key in NPM url-parse prior to 1.5.9.CVE-2022-0686debiannode-url-parse+4EPSS score1.83%
Authorization Bypass Through User-Controlled Key in NPM url-parse prior to 1.5.8.CVE-2022-0639debiannode-url-parse+4EPSS score1.54%
Authorization Bypass Through User-Controlled Key in NPM url-parse prior to 1.5.7.