{"action":"Upgrade url-parse to 1.5.2 or later.","affected":[{"fixed":"1.5.2","introduced":"0.1.0"}],"component":"url-parse","cve_ids":["CVE-2021-3664"],"ecosystem":"npm","epss":0.02116,"exploited":false,"fixed_versions":["1.5.2"],"ghsa_id":"GHSA-hh27-ffr2-f2jc","id":"tcs_01M5KFV50P80S8HWTC8DNZQY56","modified_at":"2026-02-03T22:17:46.266125Z","published_at":"2021-08-10T16:07:08Z","references":["https://osv.dev/vulnerability/GHSA-hh27-ffr2-f2jc","https://nvd.nist.gov/vuln/detail/CVE-2021-3664","https://github.com/unshiftio/url-parse/issues/205","https://github.com/unshiftio/url-parse/issues/206","https://github.com/github/advisory-database/pull/6764","https://github.com/unshiftio/url-parse/commit/81ab967889b08112d3356e451bf03e6aa0cbb7e0","https://github.com/unshiftio/url-parse","https://huntr.dev/bounties/1625557993985-unshiftio/url-parse","https://lists.debian.org/debian-lts-announce/2023/02/msg00030.html"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-hh27-ffr2-f2jc","url":"https://osv.dev/vulnerability/GHSA-hh27-ffr2-f2jc"}],"summary":"Open redirect in url-parse"}