GHSA-4P35-CFCX-8653 Hostname confusion in parse-url

Exposure of Sensitive Information to an Unauthorized Actor via hostname confusion in GitHub repository ionicabizau/parse-url prior to 6.0.1...

GHSA-JPP7-7CHH-CF67 Cross site scripting in parse-url

Cross-site Scripting XSS - Stored in GitHub repository ionicabizau/parse-url prior to 7.0.0...

Cross site scripting in parse-url

Cross-site Scripting XSS - Stored in GitHub repository ionicabizau/parse-url prior to 7.0.0...

Hostname confusion in parse-url

Exposure of Sensitive Information to an Unauthorized Actor via hostname confusion in GitHub repository ionicabizau/parse-url prior to 6.0.1...

@candlelabs/sdk (>=1.0.1, <=1.0.2), candlelabssdk (1.0.0) potentially affected by CVE-2022-0722 via parse-url (6.0.0)

parse-url NPM version 6.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on parse-url and may be impacted: - @candlelabs/sdk =1.0.1, =1.0.2 - candlelabssdk 1.0.0 Source cves: CVE-2022-0722 Source advisory: GHSA-4P35-CFCX-8653...

PT-2022-31884

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.121 Description The issue is related to a double free in the si parse power table function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prio...

PT-2022-32026

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.198 Description The issue is related to a double free in the si parse power table function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior...

PT-2022-32344

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.318 Description The issue is related to a double free in the si parse power table function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior...

PT-2022-32260

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.283 Description The issue is related to a double free in the si parse power table function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prio...

PT-2022-32164

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.247 Description The issue is related to a double free in the si parse power table function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prio...

CVE-2022-0624: Authorization Bypass Through User-Controlled Key

Authorization Bypass Through User-Controlled Key in GitHub repository ionicabizau/parse-path prior to 5.0.0...

parse-path 安全漏洞

parse-path is a library by the individual developers of Ionică Bizău. It is used to parse path. A security vulnerability exists in parse-path versions prior to 5.0.0, which stems from a lack of valid restrictions on the presence of user-controlled keys in the application. An attacker can exploit...

PT-2022-13308

Name of the Vulnerable Software and Affected Versions parse-path versions prior to 5.0.0 Description The issue is related to an authorization bypass through a user-controlled key in the parse-path repository on GitHub. Recommendations For versions prior to 5.0.0, update to version 5.0.0 or later ...

PT-2022-32342

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.318 Description A refcount leak was discovered in the pfuze parse regulators dt function. The issue was introduced in version v3.12 and is fixed in version v4.9.318. The actual impact and attack plausibility...

PT-2022-32047

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 3.12 through 5.4.197 Description A refcount leak was discovered in the pfuze parse regulators dt function. The issue was introduced in version v3.12 and is fixed in version v5.4.198. The actual impact and attack...

PT-2022-32171

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.247 Description A refcount leak was discovered in the pfuze parse regulators dt function. The issue was introduced in version v3.12 and is fixed in Linux Kernel version v4.19.247. The actual impact and atta...

PT-2022-31662

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.46 Description A refcount leak was discovered in the pfuze parse regulators dt function. The issue was introduced in version v3.12 and is fixed in version v5.15.46. The actual impact and attack plausibility...

PT-2022-31377

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.14 Description A refcount leak was discovered in the pfuze parse regulators dt function. The issue was introduced in version v3.12 and is fixed in Linux Kernel version v5.17.14. The actual impact and attack...

PT-2022-31870

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 3.12 through 5.10.120 Description A refcount leak was discovered in the pfuze parse regulators dt function. The issue was introduced in version v3.12 and is fixed in Linux Kernel version v5.10.121. Recommendations For Lin...

PT-2022-31658

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.46 Description The issue is related to a double free in the si parse power table function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior...