VulnerableCode Package Details - pkg:npm/url-parse@1.5.2

Staging Environment: Content and features may be unstable or change without notice.

Search for packages

Package details: pkg:npm/url-parse@1.5.2

Essentials
History (7)

purl	pkg:npm/url-parse@1.5.2

Next non-vulnerable version	1.5.9
Latest non-vulnerable version	1.5.9
Risk	4.5

Vulnerabilities affecting this package (4)

Vulnerability	Summary	Fixed by
VCID-7kvx-pymh-7kch Aliases: CVE-2022-0512 GHSA-rqff-837h-mm52	Authorization bypass in url-parse	1.5.6 Affected by 3 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}
VCID-bs8v-khzf-9qad Aliases: CVE-2022-0686 GHSA-hgjh-723h-mx2j	Authorization Bypass Through User-Controlled Key in url-parse	1.5.8 Affected by 1 other vulnerability. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }}
VCID-x89h-pdw9-puas Aliases: CVE-2022-0639 GHSA-8v38-pw62-9cw2	url-parse Incorrectly parses URLs that include an '@'	1.5.7 Affected by 2 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}
VCID-xvc2-dez9-byey Aliases: CVE-2022-0691 GHSA-jf5r-8hm2-f872	url-parse incorrectly parses hostname / protocol due to unstripped leading control characters.	1.5.9 Affected by 0 other vulnerabilities.

Vulnerabilities fixed by this package (1)

Vulnerability	Summary	Aliases
VCID-7k2e-h442-budm	url-parse is vulnerable to URL Redirection to Untrusted Site	CVE-2021-3664 GHSA-hh27-ffr2-f2jc

Date	Actor	Action	Vulnerability	Source	VulnerableCode Version
2026-06-13T06:23:51.688185+00:00	GHSA Importer	Fixing	VCID-7k2e-h442-budm	https://github.com/advisories/GHSA-hh27-ffr2-f2jc	38.6.0
2026-06-12T18:00:22.780987+00:00	GitLab Importer	Affected by	VCID-xvc2-dez9-byey	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/url-parse/CVE-2022-0691.yml	38.6.0
2026-06-12T18:00:17.796182+00:00	GitLab Importer	Affected by	VCID-bs8v-khzf-9qad	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/url-parse/CVE-2022-0686.yml	38.6.0
2026-06-12T18:00:14.338580+00:00	GitLab Importer	Affected by	VCID-x89h-pdw9-puas	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/url-parse/CVE-2022-0639.yml	38.6.0
2026-06-12T17:59:55.476505+00:00	GitLab Importer	Affected by	VCID-7kvx-pymh-7kch	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/url-parse/CVE-2022-0512.yml	38.6.0
2026-06-12T15:42:02.886512+00:00	GitLab Importer	Fixing	VCID-7k2e-h442-budm	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/url-parse/CVE-2021-3664.yml	38.6.0
2026-06-12T08:04:26.862868+00:00	GithubOSV Importer	Fixing	VCID-7k2e-h442-budm	https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2021/08/GHSA-hh27-ffr2-f2jc/GHSA-hh27-ffr2-f2jc.json	38.6.0