CVE-2020-26291
1 advisory.
npm/urijs CVE-2020-26291: medium 6.5
Hostname spoofing via backslashes in URL
Action: Upgrade urijs to 1.19.4 or later.
npm i urijs@1.19.4Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.19.4 | - |
Fixed versions
| 1.19.4 |
Sources
- osv: GHSA-3329-pjwv-fjpg
- https://github.com/medialize/URI.js/security/advisories/GHSA-3329-pjwv-fjpg
- https://nvd.nist.gov/vuln/detail/CVE-2020-26291
- https://github.com/medialize/URI.js/commit/b02bf037c99ac9316b77ff8bfd840e90becf1155
- https://github.com/medialize/URI.js
- https://github.com/medialize/URI.js/releases/tag/v1.19.4
- https://www.npmjs.com/advisories/1595
- https://www.npmjs.com/package/urijs
CVE-2020-26291 · published · modified · JSON