Skip to main content
cve.nowby Sazabi
← npm
npmPackage

parse-url

6 known vulnerabilities (5 critical, 1 medium), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
6 · 5 critical, 1 medium
Registry
npm

Advisories 6

  • CVE-2022-3224Critical 9.4

    Misinterpretation of Input in ionicabizau/parse-url

    Affected: fixed in 8.1.0.

  • CVE-2022-2900Critical 9.1

    Server-Side Request Forgery (SSRF) in ionicabizau/parse-url

    Affected: fixed in 8.1.0.

  • CVE-2022-2216Critical 9.4

    Server-Side Request Forgery (SSRF) in ionicabizau/parse-url

    Affected: fixed in 6.0.1.

  • CVE-2022-2218Critical 9.1

    Cross-site Scripting (XSS) - Stored in ionicabizau/parse-url

    Affected: fixed in 6.0.1.

  • CVE-2022-0722Medium 4.8

    Exposure of Sensitive Information to an Unauthorized Actor in ionicabizau/parse-url

    Affected: fixed in 6.0.1.

  • CVE-2022-2217Critical 9.1

    Cross-site Scripting (XSS) - Generic in ionicabizau/parse-url

    Affected: fixed in 6.0.1.