MEDIUM6.5npm
GHSA-3329-pjwv-fjpg· CVE-2020-26291Hostname spoofing via backslashes in URL
Modified: 7/8/2026
package
npm/urijs
pkg:npm/urijs
HIGH7.2npm
GHSA-3vjf-82ff-p4r3· CVE-2022-1243Incorrect protocol extraction via \r, \n and \t characters
Modified: 11/8/2023
MEDIUM5.3npm
GHSA-89gv-h8wf-cg8r· CVE-2021-3647URIjs Vulnerable to Hostname spoofing via backslashes in URL
Modified: 11/8/2023
MEDIUM6.1npm
GHSA-8h2f-7jc4-7m3m· CVE-2022-0868Open Redirect in urijs
Modified: 11/8/2023
MEDIUM6.5npm
GHSA-g694-m8vq-gv9h· CVE-2022-1233URL Confusion When Scheme Not Supplied in medialize/uri.js
Modified: 11/8/2023
MEDIUM6.5npm
GHSA-gcv8-gh4r-25x6· CVE-2022-0613Authorization Bypass Through User-Controlled Key in urijs
Modified: 11/8/2023
MEDIUM5.3npm
GHSA-gmv4-r438-p67f· CVE-2022-24723Leading white space bypasses protocol validation
Modified: 11/8/2023
HIGH7.5npm
GHSA-p6j9-7xhc-rhwp· CVE-2021-27516URIjs Hostname spoofing via backslashes in URL
Modified: 11/8/2023