npm/parse-path CVE-2022-0624: high 7.3, EPSS 0.92%

Authorization Bypass in parse-path

Action: Upgrade parse-path to 5.0.0 or later.

npm i parse-path@5.0.0

Affected

Fixed versions

Sources

• osv: GHSA-3j8f-xvm3-ffx4
• https://nvd.nist.gov/vuln/detail/CVE-2022-0624
• https://github.com/ionicabizau/parse-path/commit/f9ad8856a3c8ae18e1cf4caef5edbabbc42840e8
• https://github.com/ionicabizau/parse-path
• https://huntr.dev/bounties/afffb2bd-fb06-4144-829e-ecbbcbc85388

CVE-2022-0624 · published 2022-06-29T00:00:57Z · modified 2023-11-08T04:07:37.270190Z · JSON