CVE-2022-0613

Authorization Bypass Through User-Controlled Key in NPM urijs prior to 1.19.8...

UBUNTU-CVE-2022-0613

Authorization Bypass Through User-Controlled Key in NPM urijs prior to 1.19.8...

Medialize urijs input validation error vulnerability

urijs is a Javascript URL mutation library. An input validation error vulnerability exists in urijs that stems from allowing hostname spoofing through the use of a backslash character followed by an at @ character. If a hostname is used in a security decision, the decision may be incorrect...