Known vulnerabilities in url-parse

Vendor: unshiftio
Software: url-parse
Software CPE: cpe:2.3:a:unshiftio:url-parse:*:*:*:*:*:*:*:*
Website: https://unshift.io/
Total vulnerabilities: 8
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting url-parse url-parse is affected by 8 known vulnerabilities: 6 medium, 2 low Critical High Medium Low

Vulnerabilities (8)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU74174 - Improper input validation
CVE-2020-8124		 CWE-20 Medium
No
No
 1.4.5 29.03.2023 SB2020020444
SB2023032938
SB2024061009
and 1 more
#VU74173 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2018-3774		 CWE-601 Low
No
No
 1.4.3 29.03.2023 SB2018081321
SB2023032938
#VU67255 - Authorization Bypass Through User-Controlled Key
CVE-2022-0691		 CWE-639 Medium
No
No
 1.5.9 13.09.2022 SB2022022134
SB2022091358
SB2023032938
and 2 more
#VU67254 - Authorization Bypass Through User-Controlled Key
CVE-2022-0686		 CWE-639 Medium
No
No
 1.5.8 13.09.2022 SB2022022004
SB2022091358
SB2023032938
and 3 more
#VU67253 - Authorization Bypass Through User-Controlled Key
CVE-2022-0639		 CWE-639 Medium
No
No
 1.5.7 13.09.2022 SB2022021730
SB2022091358
SB2023032938
and 3 more
#VU67251 - Authorization Bypass Through User-Controlled Key
CVE-2022-0512		 CWE-639 Medium
No
No
 1.5.6 13.09.2022 SB2022021433
SB2022091358
SB2023032938
and 3 more
#VU55484 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2021-3664		 CWE-601 Low
No
No
 1.5.2 02.08.2021 SB2021080206
SB2021082509
SB2023032938
and 3 more
#VU50868 - Exposure of sensitive information to an unauthorized actor
CVE-2021-27515		 CWE-200 Medium
No
No
 1.5.0 23.02.2021 SB2021022310
SB2023032938
SB2024010530
and 2 more