~ / search / GHSA-hh27-ffr2-f2jc

GHSA-hh27-ffr2-f2jc

Open redirect in url-parse

Source: GitHub Advisory Database (reviewed) Moderate CVE-2021-3664

Packages

EcosystemPackageAffectedFixed in
npm url-parse >= 0.1.0, < 1.5.2 1.5.2

Details

As written in the advisory (Markdown source, shown as plain text).

# Overview Affected versions of npm `url-parse` are vulnerable to URL Redirection to Untrusted Site. # Impact Depending on library usage and attacker intent, impacts may include allow/block list bypasses, SSRF attacks, open redirects, or other undesired behavior.

References

External links from the advisory. They lead to third-party sites.