CVE-2022-3224
1 advisory.
npm/parse-url CVE-2022-3224: medium 6.1
parse-url parses http URLs incorrectly, making it vulnerable to host name spoofing
Action: Upgrade parse-url to 8.1.0 or later.
npm i parse-url@8.1.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 8.1.0 | - |
Fixed versions
| 8.1.0 |
Sources
- osv: GHSA-pqw5-jmp5-px4v
- https://nvd.nist.gov/vuln/detail/CVE-2022-3224
- https://github.com/ionicabizau/parse-url/commit/9cacf38de02db0fb1358bd6ec04543e523cd6a8e
- https://github.com/ionicabizau/parse-url
- https://huntr.dev/bounties/3587a567-7fcd-4702-b7c9-d9ca565e3c62
CVE-2022-3224 · published · modified · JSON