VDB
Sign up
MEDIUM6.1

GHSA-8fr3-hfg3-gpgp

Open Redirect in node-forge

Quick fix

GHSA-8fr3-hfg3-gpgp — node-forge: upgrade to the fixed version with the command below.

npm install node-forge@1.0.0

Details

parseUrl functionality in node-forge mishandles certain uses of backslash such as `https:/\/\/\` and interprets the URI as a relative path.

Are you affected?

Enter the version of the package you're using.

Affected packages

npm/node-forge
Introduced in: 0Fixed in: 1.0.0
Fixnpm install node-forge@1.0.0

References