~ / search / GHSA-46c4-8wrp-j99v

GHSA-46c4-8wrp-j99v

Improper Validation and Sanitization in url-parse

Source: GitHub Advisory Database (reviewed) Moderate CVE-2020-8124

Packages

EcosystemPackageAffectedFixed in
npm url-parse >= 0.1.0, < 1.4.5 1.4.5

Details

As written in the advisory (Markdown source, shown as plain text).

Insufficient validation and sanitization of user input exists in url-parse npm package version 1.4.4 and earlier may allow attacker to bypass security checks.

References

External links from the advisory. They lead to third-party sites.