Known vulnerabilities in parse-url
Vendor:
IonicaBizau
Software:
parse-url
Software CPE:
cpe:2.3:a:ionicabizau:parse-url:*:*:*:*:*:nodejs:*:*
Website:
https://github.com/IonicaBizau
Total vulnerabilities:
6
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
6.9
Breakdown by Severity Chart
Vulnerabilities (6)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU67942 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing) CVE-2022-3224 |
CWE-451 | Medium | 8.1.0 | 05.10.2022 |
SB2022100543 SB2024010505 |
||
| #VU67941 - Server-Side Request Forgery (SSRF) CVE-2022-2900 |
CWE-918 | Medium | 8.1.0 | 05.10.2022 |
SB2022100543 SB2024010505 |
||
| #VU67940 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2022-2217 |
CWE-79 | Low | 7.0.0 | 05.10.2022 |
SB2022100542 |
||
| #VU67939 - Server-Side Request Forgery (SSRF) CVE-2022-2216 |
CWE-918 | Medium | 7.0.0 | 05.10.2022 |
SB2022100542 |
||
| #VU67938 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2022-2218 |
CWE-79 | Low | 7.0.0 | 05.10.2022 |
SB2022100542 |
||
| #VU67937 - Exposure of sensitive information to an unauthorized actor CVE-2022-0722 |
CWE-200 | Low | 7.0.0 | 05.10.2022 |
SB2022100542 SB2022100554 SB2022103128 |