Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:npm/normalize-url@5.3.1
purl pkg:npm/normalize-url@5.3.1
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-vg7c-pctm-m7gn ReDoS in normalize-url The normalize-url package before 4.5.1, 5.x before 5.3.1, and 6.x before 6.0.1 for Node.js has a ReDoS (regular expression denial of service) issue because it has exponential performance for data: URLs. CVE-2021-33502
GHSA-px4h-xg32-q955

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-02T16:57:26.939528+00:00 GHSA Importer Fixing VCID-vg7c-pctm-m7gn https://github.com/advisories/GHSA-px4h-xg32-q955 38.1.0
2026-04-02T12:38:55.539830+00:00 GitLab Importer Fixing VCID-vg7c-pctm-m7gn https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/normalize-url/CVE-2021-33502.yml 38.0.0
2026-04-01T13:02:20.234244+00:00 GithubOSV Importer Fixing VCID-vg7c-pctm-m7gn https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2021/06/GHSA-px4h-xg32-q955/GHSA-px4h-xg32-q955.json 38.0.0