UR
Product
url-parse
by HackerOne · last CVE Aug 12, 2018
1
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 1High 0Medium 0Low 0
Watch

Add url-parse to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2018-3774
10.0
4%
Aug 12
Incorrect parsing in url-parse <1.4.3 returns wrong hostname which leads to multiple vulnerabilities such as SSRF, Open Redirect, Bypass Authentication Protocol
Affected: 1.4.3
Showing 1