Lookup for vulnerable packages by Package URL.

Purlpkg:npm/url-parse@1.4.3
Typenpm
Namespace
Nameurl-parse
Version1.4.3
Qualifiers
Subpath
Is_vulnerablefalse
Next_non_vulnerable_version1.4.3
Latest_non_vulnerable_version1.4.3
Affected_by_vulnerabilities
Fixing_vulnerabilities
0
url VCID-suhk-1g74-1khf
vulnerability_id VCID-suhk-1g74-1khf
summary
Open Redirect
url-parse package return wrong hostname
references
0
reference_url http://0xahmed.ninja/
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3
scoring_elements
url http://0xahmed.ninja/
1
reference_url https://github.com/unshiftio/url-parse/commit/53b1794e54d0711ceb52505e0f74145270570d5a
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3
scoring_elements
url https://github.com/unshiftio/url-parse/commit/53b1794e54d0711ceb52505e0f74145270570d5a
2
reference_url https://github.com/unshiftio/url-parse/commit/d7b582ec1243e8024e60ac0b62d2569c939ef5de
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3
scoring_elements
url https://github.com/unshiftio/url-parse/commit/d7b582ec1243e8024e60ac0b62d2569c939ef5de
3
reference_url https://hackerone.com/reports/384029
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3
scoring_elements
url https://hackerone.com/reports/384029
4
reference_url https://github.com/nodejs/security-wg/blob/main/vuln/npm/456.json
reference_id 456
reference_type
scores
0
value 7.5
scoring_system cvssv3
scoring_elements
url https://github.com/nodejs/security-wg/blob/main/vuln/npm/456.json
fixed_packages
0
url pkg:npm/url-parse@1.4.3
purl pkg:npm/url-parse@1.4.3
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/url-parse@1.4.3
aliases CVE-2018-3774
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-suhk-1g74-1khf
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:npm/url-parse@1.4.3