{"action":"Upgrade parse-url to 8.1.0 or later.","affected":[{"fixed":"8.1.0","introduced":"0"}],"component":"parse-url","cve_ids":["CVE-2022-2900"],"ecosystem":"npm","epss":0.01239,"exploited":false,"fixed_versions":["8.1.0"],"ghsa_id":"GHSA-j9fq-vwqv-2fm2","id":"tcs_01M5KFXHS2KX0YSNYYP03Z7MVM","modified_at":"2023-11-08T04:09:06.606507Z","published_at":"2022-09-15T00:00:24Z","references":["https://osv.dev/vulnerability/GHSA-j9fq-vwqv-2fm2","https://nvd.nist.gov/vuln/detail/CVE-2022-2900","https://github.com/ionicabizau/parse-url/commit/b88c81df8f4c5168af454eaa4f92afa9349e4e13","https://github.com/IonicaBizau/parse-url","https://huntr.dev/bounties/1b4c972a-abc8-41eb-a2e1-696db746b5fd"],"severity":{"label":"critical","score":9.1},"sources":[{"source":"osv","source_id":"GHSA-j9fq-vwqv-2fm2","url":"https://osv.dev/vulnerability/GHSA-j9fq-vwqv-2fm2"}],"summary":"Server-Side Request Forgery (SSRF) in GitHub repository ionicabizau/parse-url"}