repository icon
unshiftio / url-parse Project repository

Small footprint URL parser that works seamlessly across Node.js and browser environments.

Submit a report

FIRST INTERACTION

WITHINN/A DAYS

REVIEW

WITHIN47 DAYS

FIX

WITHIN13 DAYS

URL Confusion Can Leads Authorization Bypass
jayway007
pending
ReDoS (Regular expression Denial of Service) on "trim" function
memmedrehimzade
pending
Using HTML encoding leads to protocol filter bypass
nhienit2010
self closed
SSRF via Improper Input Validation in unshiftio / url-parse
inweol
spam
Cross Site Scripting via Improper Input Validation in unshiftio/url-parse
inweol
spam
Cross Site Scripting via Improper Input Validation in unshiftio / url-parse
inweol
spam
Authorization Bypass Through User-Controlled Key in unshiftio/url-parse
huydoppa
not applicable
Authorization Bypass Through User-Controlled Key
haxatron
Medium
•$750•CVE-2022-0691
Authorization Bypass Through User-Controlled Key
r0hansh
Medium
•$750•CVE-2022-0686
Authorization Bypass Through User-Controlled Key
haxatron
Medium
•$750•CVE-2022-0639
Authorization Bypass Through User-Controlled Key
ranjit-git
High
•$750•CVE-2022-0512
Open Redirect
ready-research
Medium
•$500•CVE-2021-3664