parse-url cross-site scripting vulnerability

parse-url is an advanced url parser that supports git url. parse-url versions prior to 7.0.0 have a cross-site scripting vulnerability that originates from last fix can be bypassed and can be exploited by an attacker to place any malicious JS code on a web page.