CVE-2021-33502
1 advisory.
npm/normalize-url CVE-2021-33502: high 7.5
ReDoS in normalize-url
Action: Upgrade normalize-url to 4.5.1 or later.
npm i normalize-url@4.5.1npm i normalize-url@5.3.1npm i normalize-url@6.0.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 4.3.0 | 4.5.1 | - |
| 5.0.0 | 5.3.1 | - |
| 6.0.0 | 6.0.1 | - |
Fixed versions
| 4.5.1 | 5.3.1 | 6.0.1 |
Sources
- osv: GHSA-px4h-xg32-q955
- https://nvd.nist.gov/vuln/detail/CVE-2021-33502
- https://github.com/sindresorhus/normalize-url/commit/b1fdb5120b6d27a88400d8800e67ff5a22bd2103
- https://github.com/sindresorhus/normalize-url
- https://github.com/sindresorhus/normalize-url/releases/tag/v6.0.1
- https://security.netapp.com/advisory/ntap-20210706-0001
CVE-2021-33502 · published · modified · JSON