Known Vulnerabilities for products from Url-parse Project
Listed below are 8 of the newest known vulnerabilities associated with the vendor "Url-parse Project".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-45033 json | Not Provided | 2026-05-13 | 2026-05-13 | |
| CVE-2022-0691 json | Authorization Bypass Through User-Controlled Key in NPM url-parse prior to 1.5.9. | 9.8 - CRITICAL | 2022-02-21 | 2023-02-23 |
| CVE-2022-0686 json | Authorization Bypass Through User-Controlled Key in NPM url-parse prior to 1.5.8. | 9.1 - CRITICAL | 2022-02-20 | 2023-02-23 |
| CVE-2022-0639 json | Authorization Bypass Through User-Controlled Key in NPM url-parse prior to 1.5.7. | 5.3 - MEDIUM | 2022-02-17 | 2023-02-23 |
| CVE-2022-0512 json | Authorization Bypass Through User-Controlled Key in NPM url-parse prior to 1.5.6. | 5.3 - MEDIUM | 2022-02-14 | 2023-02-23 |
| CVE-2021-47987 json | Not Provided | 2026-06-25 | 2026-06-26 | |
| CVE-2021-27515 json | url-parse before 1.5.0 mishandles certain uses of backslash such as http:\/ and interprets the URI as a relative path. | 5.3 - MEDIUM | 2021-02-22 | 2023-02-23 |
| CVE-2021-3664 json | url-parse is vulnerable to URL Redirection to Untrusted Site | 5.3 - MEDIUM | 2021-07-26 | 2023-02-23 |
| CVE-2020-8124 json | Insufficient validation and sanitization of user input exists in url-parse npm package version 1.4.4 and earlier may allow at... | 5.3 - MEDIUM | 2020-02-04 | 2020-02-18 |
| CVE-2018-3774 json | Incorrect parsing in url-parse <1.4.3 returns wrong hostname which leads to multiple vulnerabilities such as SSRF, Open Redir... | 10 - CRITICAL | 2018-08-12 | 2019-10-09 |
Known software with vulnerabilities from Url-parse Project
| Type | Vendor | Product | Version |
|---|---|---|---|
| Operating System | Url-parse Project | Url-parse | 0.0.4 |
| Application | Url-parse Project | Url-parse | 0.0.4 |
| Operating System | Url-parse Project | Url Project | 1.4.0 |