{"action":"Upgrade parse-url to 6.0.1 or later.","affected":[{"fixed":"6.0.1","introduced":"0"}],"component":"parse-url","cve_ids":["CVE-2022-0722"],"ecosystem":"npm","epss":0.01169,"exploited":false,"fixed_versions":["6.0.1"],"ghsa_id":"GHSA-4p35-cfcx-8653","id":"tcs_01M5KF1002EWY16A9TDBZKG0RJ","modified_at":"2023-11-08T04:07:39.000074Z","published_at":"2022-06-28T00:01:01Z","references":["https://osv.dev/vulnerability/GHSA-4p35-cfcx-8653","https://nvd.nist.gov/vuln/detail/CVE-2022-0722","https://github.com/ionicabizau/parse-url/commit/21c72ab9412228eea753e2abc48f8962707b1fe3","https://huntr.dev/bounties/2490ef6d-5577-4714-a4dd-9608251b4226"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-4p35-cfcx-8653","url":"https://osv.dev/vulnerability/GHSA-4p35-cfcx-8653"}],"summary":"Hostname confusion in parse-url"}