Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 8

Export CSV
CVE-2022-0639

Authorization Bypass Through User-Controlled Key in unshiftio/url-parse

Authorization Bypass Through User-Controlled Key in NPM url-parse prior to 1.5.7.

CVSS 3.1 · 5.3 Medium EPSS 1.5% KEV · Not listed
Vendors
Redhat Url-parse Project
Products
Rhmt Url-parse
CVE-2022-0691

Authorization Bypass Through User-Controlled Key in unshiftio/url-parse

Authorization Bypass Through User-Controlled Key in NPM url-parse prior to 1.5.9.

CVSS 3.1 · 9.8 Critical EPSS 2.2% KEV · Not listed
Vendors
Redhat Url-parse Project
Products
Rhmt Url-parse
CVE-2022-0686

Authorization Bypass Through User-Controlled Key in unshiftio/url-parse

Authorization Bypass Through User-Controlled Key in NPM url-parse prior to 1.5.8.

CVSS 3.1 · 9.1 Critical EPSS 1.8% KEV · Not listed
Vendors
Redhat Url-parse Project
Products
Rhmt Url-parse
CVE-2022-0512

Authorization Bypass Through User-Controlled Key in unshiftio/url-parse

Authorization Bypass Through User-Controlled Key in NPM url-parse prior to 1.5.6.

CVSS 3.1 · 5.3 Medium EPSS 1.8% KEV · Not listed
Vendors
Redhat Url-parse Project
Products
Rhmt Url-parse
CVE-2021-27515

nodejs-url-parse: mishandling certain uses of backslash may lead to confidentiality compromise

url-parse before 1.5.0 mishandles certain uses of backslash such as http:\/ and interprets the URI as a relative path.

CVSS 3.1 · 5.3 Medium EPSS 2.0% KEV · Not listed
Vendors
Redhat Url-parse Project
Products
Quay Url-parse
CVE-2020-8124

npmjs-url-parse: Improper validation of protocol of the returned URL

Insufficient validation and sanitization of user input exists in url-parse npm package version 1.4.4 and earlier may allow attacker to bypass security checks.

CVSS 3.1 · 5.3 Medium EPSS 1.7% KEV · Not listed
Vendors
Redhat Url-parse Project
Products
Service Mesh Url-parse
CVE-2018-3774

nodejs-url-parse: incorrect hostname in url parsing

Incorrect parsing in url-parse <1.4.3 returns wrong hostname which leads to multiple vulnerabilities such as SSRF, Open Redirect, Bypass Authentication Protocol.

CVSS 3.1 · 9.8 Critical EPSS 3.8% KEV · Not listed
Vendors
Redhat Url-parse Project
Products
Quay Url-parse