~ / search / GHSA-4p35-cfcx-8653

GHSA-4p35-cfcx-8653

Hostname confusion in parse-url

Source: GitHub Advisory Database (reviewed) High CVE-2022-0722

Packages

EcosystemPackageAffectedFixed in
npm parse-url < 6.0.1 6.0.1

Details

As written in the advisory (Markdown source, shown as plain text).

Exposure of Sensitive Information to an Unauthorized Actor via hostname confusion in GitHub repository ionicabizau/parse-url prior to 6.0.1

References

External links from the advisory. They lead to third-party sites.