41 matches found
GHSA-J9FQ-VWQV-2FM2 Server-Side Request Forgery (SSRF) in GitHub repository ionicabizau/parse-url
Server-Side Request Forgery SSRF in GitHub repository ionicabizau/parse-url prior to 8.1.0...
CVE-2022-2900
Server-Side Request Forgery SSRF in GitHub repository ionicabizau/parse-url prior to 8.1.0...
Server side request forgery (ssrf)
Server-Side Request Forgery SSRF in GitHub repository ionicabizau/parse-url prior to 8.1.0...
CVE-2022-2900 Server-Side Request Forgery (SSRF) in ionicabizau/parse-url
Server-Side Request Forgery SSRF in GitHub repository ionicabizau/parse-url prior to 8.1.0...
CVE-2022-0624
Authorization Bypass Through User-Controlled Key in GitHub repository ionicabizau/parse-path prior to 5.0.0...
Authorization
Authorization Bypass Through User-Controlled Key in GitHub repository ionicabizau/parse-path prior to 5.0.0...
Server-Side Request Forgery in parse-url
Server-Side Request Forgery SSRF in GitHub repository ionicabizau/parse-url prior to 7.0.0...
Cross site scripting in parse-url
Cross-site Scripting XSS - Generic in GitHub repository ionicabizau/parse-url prior to 6.0.1...
GHSA-Q6WQ-5P59-983W Cross site scripting in parse-url
Cross-site Scripting XSS - Generic in GitHub repository ionicabizau/parse-url prior to 6.0.1...
GHSA-4P35-CFCX-8653 Hostname confusion in parse-url
Exposure of Sensitive Information to an Unauthorized Actor via hostname confusion in GitHub repository ionicabizau/parse-url prior to 6.0.1...
CVE-2022-2216
Server-Side Request Forgery SSRF in GitHub repository ionicabizau/parse-url prior to 7.0.0...
CVE-2022-2216 Server-Side Request Forgery (SSRF) in ionicabizau/parse-url
Server-Side Request Forgery SSRF in GitHub repository ionicabizau/parse-url prior to 7.0.0...
CVE-2022-2216
CVE-2022-2216 corresponds to a Server-Side Request Forgery (SSRF) in the GitHub repository ionicabizau/parse-url, affecting versions prior to 7.0.0. The connected documents describe the issue as an SSRF flaw in the URL parsing logic (with references noting potential local file access). The root c...
CVE-2022-2216 Server-Side Request Forgery (SSRF) in ionicabizau/parse-url
Server-Side Request Forgery SSRF in GitHub repository ionicabizau/parse-url prior to 7.0.0...
CVE-2022-2218 Cross-site Scripting (XSS) - Stored in ionicabizau/parse-url
Cross-site Scripting XSS - Stored in GitHub repository ionicabizau/parse-url prior to 7.0.0...
CVE-2022-2218 Cross-site Scripting (XSS) - Stored in ionicabizau/parse-url
Cross-site Scripting XSS - Stored in GitHub repository ionicabizau/parse-url prior to 7.0.0...
CVE-2022-2217
Cross-site Scripting XSS - Generic in GitHub repository ionicabizau/parse-url prior to 7.0.0...
CVE-2022-0722
Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository ionicabizau/parse-url prior to 7.0.0...
CVE-2022-2217
Cross-site Scripting XSS - Generic in GitHub repository ionicabizau/parse-url prior to 7.0.0...
CVE-2022-2217
The CVE-2022-2217 issue is a cross-site scripting (XSS) vulnerability in the npm package parse-url (GitHub: ionicabizau/parse-url) affecting versions prior to 7.0.0 . The root cause is the ability to inject or execute malicious JavaScript on webpages produced by the affected package through craft...