CVE-2022-1233

npm/urijs CVE-2022-1233: medium 6.5, EPSS 0.80%

URL Confusion When Scheme Not Supplied in medialize/uri.js

Action: Upgrade urijs to 1.19.11 or later.

npm i urijs@1.19.11

Affected

Fixed versions

Sources

• osv: GHSA-g694-m8vq-gv9h
• https://nvd.nist.gov/vuln/detail/CVE-2022-1233
• https://github.com/medialize/uri.js/commit/88805fd3da03bd7a5e60947adb49d182011f1277
• https://github.com/medialize/uri.js
• https://huntr.dev/bounties/228d5548-1109-49f8-8aee-91038e88371c

CVE-2022-1233 · published 2022-04-05T00:00:17Z · modified 2023-11-08T04:07:46.588715Z · JSON