VDB
Sign up
HIGH7.5

GHSA-4p35-cfcx-8653

Hostname confusion in parse-url

Quick fix

GHSA-4p35-cfcx-8653 — parse-url: upgrade to the fixed version with the command below.

npm install parse-url@6.0.1

Details

Exposure of Sensitive Information to an Unauthorized Actor via hostname confusion in GitHub repository ionicabizau/parse-url prior to 6.0.1

Are you affected?

Enter the version of the package you're using.

Affected packages

npm/parse-url
Introduced in: 0Fixed in: 6.0.1
Fixnpm install parse-url@6.0.1

References