Описание
Insufficient validation and sanitization of user input exists in url-parse npm package version 1.4.4 and earlier may allow attacker to bypass security checks.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| node-url-parse | fixed | 1.4.7-1 | package | |
| node-url-parse | fixed | 1.2.0-2+deb10u1 | buster | package |
| node-url-parse | ignored | stretch | package |
Примечания
https://github.com/unshiftio/url-parse/commit/3ecd256f127c3ada36a84d9b8dd3ebd14316274b
https://hackerone.com/reports/496293
EPSS
Связанные уязвимости
Insufficient validation and sanitization of user input exists in url-parse npm package version 1.4.4 and earlier may allow attacker to bypass security checks.
Insufficient validation and sanitization of user input exists in url-parse npm package version 1.4.4 and earlier may allow attacker to bypass security checks.
Insufficient validation and sanitization of user input exists in url-parse npm package version 1.4.4 and earlier may allow attacker to bypass security checks.
Improper Validation and Sanitization in url-parse
EPSS