{"action":"Upgrade url-parse to 1.5.6 or later.","affected":[{"fixed":"1.5.6","introduced":"0.1.0"}],"component":"url-parse","cve_ids":["CVE-2022-0512"],"ecosystem":"npm","epss":0.01782,"exploited":false,"fixed_versions":["1.5.6"],"ghsa_id":"GHSA-rqff-837h-mm52","id":"tcs_01M5KG9NKAXRQSHY5MMMYDKCGR","modified_at":"2026-02-22T22:58:53.717997Z","published_at":"2022-02-15T00:02:46Z","references":["https://osv.dev/vulnerability/GHSA-rqff-837h-mm52","https://nvd.nist.gov/vuln/detail/CVE-2022-0512","https://github.com/unshiftio/url-parse/commit/9be7ee88afd2bb04e4d5a1a8da9a389ac13f8c40","https://github.com/unshiftio/url-parse","https://huntr.dev/bounties/6d1bc51f-1876-4f5b-a2c2-734e09e8e05b","https://lists.debian.org/debian-lts-announce/2023/02/msg00030.html"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-rqff-837h-mm52","url":"https://osv.dev/vulnerability/GHSA-rqff-837h-mm52"}],"summary":"Authorization bypass in url-parse"}