npm Package Vulnerabilities
Vulnerabilities associated with parse-url.
Packages
Clear package- openclaw588 vulnerabilities
- n8n139 vulnerabilities
- parse-server116 vulnerabilities
- flowise112 vulnerabilities
- electron65 vulnerabilities
- next64 vulnerabilities
- directus58 vulnerabilities
- nocodb54 vulnerabilities
- hono47 vulnerabilities
- axios43 vulnerabilities
- vm243 vulnerabilities
- ghost41 vulnerabilities
- @budibase/server40 vulnerabilities
- undici35 vulnerabilities
- flowise-components29 vulnerabilities
- @anthropic-ai/claude-code28 vulnerabilities
- dompurify28 vulnerabilities
- pnpm28 vulnerabilities
- astro25 vulnerabilities
- @openzeppelin/contracts-upgradeable22 vulnerabilities
- better-auth22 vulnerabilities
- vite22 vulnerabilities
- @openzeppelin/contracts21 vulnerabilities
- fuxa-server21 vulnerabilities
- nuxt21 vulnerabilities
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2022-3224MEDIUM | Misinterpretation of Input in ionicabizau/parse-urlMisinterpretation of Input in GitHub repository ionicabizau/parse-url prior to 8.1.0. CWE-115Sep 15, 2022 | CVSS6.1v3.1 | EPSS0.608% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2022-2900CRITICAL | Server-Side Request Forgery (SSRF) in ionicabizau/parse-urlServer-Side Request Forgery (SSRF) in GitHub repository ionicabizau/parse-url prior to 8.1.0. CWE-918Sep 14, 2022 | CVSS9.1v3.1 | EPSS0.941% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2022-2216CRITICAL | Server-Side Request Forgery (SSRF) in ionicabizau/parse-urlServer-Side Request Forgery (SSRF) in GitHub repository ionicabizau/parse-url prior to 7.0.0. CWE-918Jun 27, 2022 | CVSS9.8v3.1 | EPSS1.54% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2022-2218MEDIUM | Cross-site Scripting (XSS) - Stored in ionicabizau/parse-urlCross-site Scripting (XSS) - Stored in GitHub repository ionicabizau/parse-url prior to 7.0.0. CWE-79Jun 27, 2022 | CVSS6.1v3.1 | EPSS0.863% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2022-0722HIGH | Exposure of Sensitive Information to an Unauthorized Actor in ionicabizau/parse-urlExposure of Sensitive Information to an Unauthorized Actor in GitHub repository ionicabizau/parse-url prior to 7.0.0. CWE-200Jun 27, 2022 | CVSS7.5v3.1 | EPSS1.11% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2022-2217MEDIUM | Cross-site Scripting (XSS) - Generic in ionicabizau/parse-urlCross-site Scripting (XSS) - Generic in GitHub repository ionicabizau/parse-url prior to 7.0.0. CWE-79Jun 27, 2022 | CVSS6.1v3.1 | EPSS0.961% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |