2 matches found
CVE-2021-27515
url-parse before 1.5.0 mishandles certain uses of backslash such as http:/ and interprets the URI as a relative path.
CVE-2021-3664
url-parse is vulnerable to URL Redirection to Untrusted Site