GHSA-hh27-ffr2-f2jcMediumCVSS 6.1

Open redirect in url-parse

Published
August 10, 2021
Last Modified
February 3, 2026

🔗 CVE IDs covered (1)

CVE-2021-3664 →

📋 Description

Overview

Affected versions of npm url-parse are vulnerable to URL Redirection to Untrusted Site.

Impact

Depending on library usage and attacker intent, impacts may include allow/block list bypasses, SSRF attacks, open redirects, or other undesired behavior.

🎯 Affected products1

  • npm/url-parse:>= 0.1.0, < 1.5.2

🔗 References (8)