~ / search / GHSA-rqff-837h-mm52

GHSA-rqff-837h-mm52

Authorization bypass in url-parse

Source: GitHub Advisory Database (reviewed) Moderate CVE-2022-0512

Packages

EcosystemPackageAffectedFixed in
npm url-parse >= 0.1.0, < 1.5.6 1.5.6

Details

As written in the advisory (Markdown source, shown as plain text).

Authorization Bypass Through User-Controlled Key in NPM url-parse prior to 1.5.6.

References

External links from the advisory. They lead to third-party sites.