MEDIUM5.3npm
GHSA-46c4-8wrp-j99v· CVE-2020-8124Improper Validation and Sanitization in url-parse
Modified: 2/3/2026
package
npm/url-parse
pkg:npm/url-parse
MEDIUM6.5npm
GHSA-8v38-pw62-9cw2· CVE-2022-0639url-parse Incorrectly parses URLs that include an '@'
Modified: 2/22/2026
MEDIUM5.3npm
GHSA-9m6j-fcg5-2442· CVE-2021-27515Path traversal in url-parse
Modified: 2/3/2026
CRITICAL9.1npm
GHSA-hgjh-723h-mx2j· CVE-2022-0686Authorization Bypass Through User-Controlled Key in url-parse
Modified: 11/8/2023
MEDIUM6.1npm
GHSA-hh27-ffr2-f2jc· CVE-2021-3664Open redirect in url-parse
Modified: 2/3/2026
MEDIUM6.5npm
GHSA-jf5r-8hm2-f872· CVE-2022-0691url-parse incorrectly parses hostname / protocol due to unstripped leading control characters.
Modified: 2/3/2026
CRITICAL10.0npm
GHSA-pv4c-p2j5-38j4· CVE-2018-3774Open Redirect in url-parse
Modified: 2/3/2026
MEDIUM5.3npm
GHSA-rqff-837h-mm52· CVE-2022-0512Authorization bypass in url-parse
Modified: 2/22/2026