Uri.js Security Vulnerabilities and Issues — Uri.js CVE List | Vulners.com

Lucene search

K

Uri.js ProjectUri.js

2 matches found

CVE•added 2022/04/05 3:15 p.m.•87 views

CVE-2022-1243

CRHTLF can lead to invalid protocol extraction potentially leading to XSS in GitHub repository medialize/uri.js prior to 1.19.11.

7.2CVSS6.1AI score0.00318EPSS

CVE•added 2021/02/22 12:15 a.m.•81 views

CVE-2021-27516

URI.js (aka urijs) before 1.19.6 mishandles certain uses of backslash such as http:/ and interprets the URI as a relative path.

7.5CVSS7.3AI score0.00552EPSS