MEDIUM6.5npm
GHSA-3329-pjwv-fjpg· CVE-2020-26291Hostname spoofing via backslashes in URL
Modified: 7/8/2026
package
pkg:npm/urijs
Hostname spoofing via backslashes in URL
Modified: 7/8/2026
Incorrect protocol extraction via \r, \n and \t characters
Modified: 11/8/2023
URIjs Vulnerable to Hostname spoofing via backslashes in URL
Modified: 11/8/2023
Open Redirect in urijs
Modified: 11/8/2023
URL Confusion When Scheme Not Supplied in medialize/uri.js
Modified: 11/8/2023
Authorization Bypass Through User-Controlled Key in urijs
Modified: 11/8/2023
Leading white space bypasses protocol validation
Modified: 11/8/2023
URIjs Hostname spoofing via backslashes in URL
Modified: 11/8/2023