unshiftio/url-parse Security Advisories | GitStock

medium2022-02-22

url-parse incorrectly parses hostname / protocol due to unstripped leading control characters.

GHSA-jf5r-8hm2-f872 · CVE-2022-0691

critical2022-02-21

Authorization Bypass Through User-Controlled Key in url-parse

GHSA-hgjh-723h-mx2j · CVE-2022-0686

medium2022-02-18

url-parse Incorrectly parses URLs that include an '@'

GHSA-8v38-pw62-9cw2 · CVE-2022-0639

medium2022-02-15

Authorization bypass in url-parse

GHSA-rqff-837h-mm52 · CVE-2022-0512

medium2022-01-06

Improper Validation and Sanitization in url-parse

GHSA-46c4-8wrp-j99v · CVE-2020-8124

medium2021-08-10

Open redirect in url-parse

GHSA-hh27-ffr2-f2jc · CVE-2021-3664

medium2021-05-06

Path traversal in url-parse

GHSA-9m6j-fcg5-2442 · CVE-2021-27515

critical2018-08-13

Open Redirect in url-parse

GHSA-pv4c-p2j5-38j4 · CVE-2018-3774