npm/parse-url CVE-2022-2218: medium 6.1, EPSS 0.91%
Cross site scripting in parse-url
Action: Upgrade parse-url to 6.0.1 or later.
npm i parse-url@6.0.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 6.0.1 | - |
Fixed versions
| 6.0.1 |
Sources
- osv: GHSA-jpp7-7chh-cf67
- https://nvd.nist.gov/vuln/detail/CVE-2022-2218
- https://github.com/ionicabizau/parse-url/commit/21c72ab9412228eea753e2abc48f8962707b1fe3
- https://github.com/ionicabizau/parse-url
- https://huntr.dev/bounties/024912d3-f103-4daf-a1d0-567f4d9f2bf5
CVE-2022-2218 · published · modified · JSON