Parse-url Project Parse-url — known CVE vulnerabilities

Every CVE whose affected-product data names Parse-url Project Parse-url, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (6)

• CVE-2022-2216 — CVSS 9.8 (critical): Server-Side Request Forgery (SSRF) in GitHub repository ionicabizau/parse-url prior to 7.0.0.
• CVE-2022-2900 — CVSS 9.1 (critical): Server-Side Request Forgery (SSRF) in GitHub repository ionicabizau/parse-url prior to 8.1.0.
• CVE-2022-0722 — CVSS 7.5 (high): Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository ionicabizau/parse-url prior to 7.0.0.
• CVE-2022-2217 — CVSS 6.1 (medium): Cross-site Scripting (XSS) - Generic in GitHub repository ionicabizau/parse-url prior to 7.0.0.
• CVE-2022-2218 — CVSS 6.1 (medium): Cross-site Scripting (XSS) - Stored in GitHub repository ionicabizau/parse-url prior to 7.0.0.
• CVE-2022-3224 — CVSS 6.1 (medium): Misinterpretation of Input in GitHub repository ionicabizau/parse-url prior to 8.1.0.