{"action":"Upgrade urijs to 1.19.7 or later.","affected":[{"fixed":"1.19.7","introduced":"0"}],"component":"urijs","cve_ids":["CVE-2021-3647"],"ecosystem":"npm","epss":0.0091,"exploited":false,"fixed_versions":["1.19.7"],"ghsa_id":"GHSA-89gv-h8wf-cg8r","id":"tcs_01M5KFCF9DYBABATZDVME7W3ZS","modified_at":"2023-11-08T04:06:14.577916Z","published_at":"2021-07-19T21:22:36Z","references":["https://osv.dev/vulnerability/GHSA-89gv-h8wf-cg8r","https://github.com/medialize/URI.js/security/advisories/GHSA-89gv-h8wf-cg8r","https://nvd.nist.gov/vuln/detail/CVE-2021-3647","https://github.com/medialize/URI.js/pull/233","https://github.com/medialize/URI.js/commit/ac43ca8f80c042f0256fb551ea5203863dec4481","https://github.com/medialize/URI.js/releases/tag/v1.19.3","https://github.com/medialize/URI.js/releases/tag/v1.19.4","https://github.com/medialize/URI.js/releases/tag/v1.19.6","https://github.com/medialize/URI.js/releases/tag/v1.19.7","https://huntr.dev/bounties/1625558772840-medialize/URI.js"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-89gv-h8wf-cg8r","url":"https://osv.dev/vulnerability/GHSA-89gv-h8wf-cg8r"}],"summary":"URIjs Vulnerable to Hostname spoofing via backslashes in URL"}