~ / search / GHSA-8h2f-7jc4-7m3m

GHSA-8h2f-7jc4-7m3m

Open Redirect in urijs

Source: GitHub Advisory Database (reviewed) Moderate CVE-2022-0868

Packages

EcosystemPackageAffectedFixed in
npm urijs < 1.19.10 1.19.10

Details

As written in the advisory (Markdown source, shown as plain text).

urijs prior to version 1.19.10 is vulnerable to open redirect. This is the result of a bypass for the fix to CVE-2022-0613.

References

External links from the advisory. They lead to third-party sites.