{"action":"Upgrade urijs to 1.19.9 or later.","affected":[{"fixed":"1.19.9","introduced":"0"}],"component":"urijs","cve_ids":["CVE-2022-24723"],"ecosystem":"npm","epss":0.01941,"exploited":false,"fixed_versions":["1.19.9"],"ghsa_id":"GHSA-gmv4-r438-p67f","id":"tcs_01M5KFS371ER0EN0DR66RPRAFW","modified_at":"2023-11-08T04:08:33.715397Z","published_at":"2022-03-03T19:23:36Z","references":["https://osv.dev/vulnerability/GHSA-gmv4-r438-p67f","https://github.com/medialize/URI.js/security/advisories/GHSA-gmv4-r438-p67f","https://nvd.nist.gov/vuln/detail/CVE-2022-24723","https://github.com/medialize/URI.js/commit/86d10523a6f6e8dc4300d99d671335ee362ad316","https://github.com/medialize/URI.js","https://github.com/medialize/URI.js/releases/tag/v1.19.9","https://huntr.dev/bounties/82ef23b8-7025-49c9-b5fc-1bb9885788e5"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-gmv4-r438-p67f","url":"https://osv.dev/vulnerability/GHSA-gmv4-r438-p67f"}],"summary":"Leading white space bypasses protocol validation"}