CVE-2021-23387

The package trailing-slash before 2.0.1 are vulnerable to Open Redirect via the use of trailing double slashes in the URL when accessing the vulnerable endpoint such as https://example.com//attacker.example/. The vulnerable code is in index.js::createTrailing, as the web server uses relative URLs...

CVE-2021-23387

CVE-2021-23387 concerns the npm package trailing-slash. The vulnerability is an Open Redirect caused by the use of trailing double slashes in URLs accessed at vulnerable endpoints, with the flaw located in index.js::createTrailing() (web server uses relative URLs). Affected versions are before 2....