{"action":"Upgrade url-parse to 1.4.3 or later.","affected":[{"fixed":"1.4.3","introduced":"1.0.0"}],"component":"url-parse","cve_ids":["CVE-2018-3774"],"ecosystem":"npm","epss":0.03805,"exploited":false,"fixed_versions":["1.4.3"],"ghsa_id":"GHSA-pv4c-p2j5-38j4","id":"tcs_01M5KG4ER7ZF8N456GP304QVNV","modified_at":"2026-02-03T03:08:48.785375Z","published_at":"2018-08-13T15:02:15Z","references":["https://osv.dev/vulnerability/GHSA-pv4c-p2j5-38j4","https://nvd.nist.gov/vuln/detail/CVE-2018-3774","https://github.com/unshiftio/url-parse/commit/209c296d302317268afbe19700a70c63ecbeb2d2","https://github.com/unshiftio/url-parse/commit/53b1794e54d0711ceb52505e0f74145270570d5a","https://github.com/unshiftio/url-parse/commit/d7b582ec1243e8024e60ac0b62d2569c939ef5de","https://hackerone.com/reports/384029","https://github.com/unshiftio/url-parse","https://github.com/unshiftio/url-parse/compare/0.2.3...1.0.0"],"severity":{"label":"critical","score":10},"sources":[{"source":"osv","source_id":"GHSA-pv4c-p2j5-38j4","url":"https://osv.dev/vulnerability/GHSA-pv4c-p2j5-38j4"}],"summary":"Open Redirect in url-parse"}