Lucene search
+L
Url-parse ProjectUrl-parse

1 matches found

CVE
CVE
added 2022/02/17 12:00 a.m.175 views

CVE-2022-0639

CVE-2022-0639 affects the Node.js URL parser library used in npm installs, specifically the node-url-parse package. Debian and Debian LTS advisories (DLA-4413-1) describe an authorization bypass where an incorrect conversion of special characters in the protocol (notably the @ character in href) ...

6.5CVSS5.4AI score0.01535EPSS
Save