~ / search / GHSA-8fr3-hfg3-gpgp

GHSA-8fr3-hfg3-gpgp

Open Redirect in node-forge

Source: GitHub Advisory Database (reviewed) Moderate CVE-2022-0122

Packages

EcosystemPackageAffectedFixed in
npm node-forge < 1.0.0 1.0.0

Details

As written in the advisory (Markdown source, shown as plain text).

parseUrl functionality in node-forge mishandles certain uses of backslash such as `https:/\/\/\` and interprets the URI as a relative path.

References

External links from the advisory. They lead to third-party sites.