What is GHSA-rqff-837h-mm52?

GHSA-rqff-837h-mm52 is a security advisory published by GitHub Security Advisories with Medium severity. Authorization bypass in url-parse

Which CVE IDs does GHSA-rqff-837h-mm52 cover?

GHSA-rqff-837h-mm52 covers the following CVE IDs: CVE-2022-0512. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-rqff-837h-mm52?

GHSA-rqff-837h-mm52 has a CVSS v3 base score of 5.3, published by GitHub Security Advisories.

Which products are affected by GHSA-rqff-837h-mm52?

GHSA-rqff-837h-mm52 affects 1 product, including: npm/url-parse:\u003e= 0.1.0, \u003c 1.5.6.

GHSA-rqff-837h-mm52MediumCVSS 5.3

Authorization bypass in url-parse

Vendor

GitHub Security Advisories

Published

February 15, 2022

Last Modified

February 20, 2026

🔗 CVE IDs covered (1)

CVE-2022-0512 →

📋 Description

Authorization Bypass Through User-Controlled Key in NPM url-parse prior to 1.5.6.

🎯 Affected products1

npm/url-parse:>= 0.1.0, < 1.5.6

🔗 References (5)

https://nvd.nist.gov/vuln/detail/CVE-2022-0512
https://github.com/unshiftio/url-parse/commit/9be7ee88afd2bb04e4d5a1a8da9a389ac13f8c40
https://huntr.dev/bounties/6d1bc51f-1876-4f5b-a2c2-734e09e8e05b
https://lists.debian.org/debian-lts-announce/2023/02/msg00030.html
https://github.com/advisories/GHSA-rqff-837h-mm52