~ / search / GHSA-hgjh-723h-mx2j

GHSA-hgjh-723h-mx2j

Authorization Bypass Through User-Controlled Key in url-parse

Source: GitHub Advisory Database (reviewed) Critical CVE-2022-0686

Packages

EcosystemPackageAffectedFixed in
npm url-parse < 1.5.8 1.5.8

Details

As written in the advisory (Markdown source, shown as plain text).

url-parse prior to version 1.5.8 is vulnerable to Authorization Bypass Through User-Controlled Key.

References

External links from the advisory. They lead to third-party sites.