GHSA-46c4-8wrp-j99vMediumCVSS 5.3

Improper Validation and Sanitization in url-parse

Published
January 6, 2022
Last Modified
February 3, 2026

🔗 CVE IDs covered (1)

📋 Description

Insufficient validation and sanitization of user input exists in url-parse npm package version 1.4.4 and earlier may allow attacker to bypass security checks.

🎯 Affected products1

  • npm/url-parse:>= 0.1.0, < 1.4.5

🔗 References (5)