`parse-url`

Ecosystem:
npm

Package URL:
pkg:npm/parse-url

Total PRs:
85 Dependabot PRs

Latest PR:
about 2 months ago

Unique Repositories:
75 repositories

Unique Repos (30 days):
0 repositories

Security Advisories

parse-url parses http URLs incorrectly, making it vulnerable to host name spoofing

GHSA-pqw5-jmp5-px4v CVE-2022-3224 MODERATE published about 3 years ago • updated about 10 hours ago

parse-url prior to 8.1.0 is vulnerable to Misinterpretation of Input. parse-url parses certain http or https URLs incorrectly, identifying the URL'...

View all 6 advisories

Recent PRs

RSS Feed

Bump parse-url from 5.0.1 to 5.0.8

aredridel/mandelbrot #3

5.0.1 → 5.0.8 Patch PR

Open about 2 months ago

chore(deps): bump the npm_and_yarn group across 1 directory with 26 updates

SimenB/react-native-elements #27

6.0.0 → 6.0.5 Patch PR

Closed about 2 months ago 1 comment

build(deps): bump parse-url and snyk

ksuzy31-org/snyk-goof #21

removed Removal PR

Open about 2 months ago

Bump parse-url and snyk

gpedro34/brs-crawler #46

removed Removal PR

Open about 2 months ago

chore(deps): bump parse-url from 6.0.5 to 8.1.0

BrianCLong/summit #1352

6.0.5 → 8.1.0 Major PR

Merged about 2 months ago

Bump parse-url and documentation

trizist/anylist #8

6.0.5 → 8.1.0 Major PR

Open about 2 months ago

Bump parse-url and release-it

internxt/rn-crypto #19

6.0.0 → 9.2.0 Major PR

Open about 2 months ago

Bump parse-url and snyk

mgifford/digital-canada-ca #7

removed Removal PR

Open 2 months ago

Bump parse-url and lerna

browserstack/appium-plugins #38

6.0.0 → 8.1.0 Major PR

Open 2 months ago

Bump the npm_and_yarn group across 1 directory with 30 updates

MetaMask/walletkit #1

6.0.0 → 6.0.5 Patch PR

Open 3 months ago

build(deps): bump the npm_and_yarn group across 1 directory with 19 updates

MetaMask/saber-common #1

5.0.3 → 5.0.8 Patch PR

Open 3 months ago 2 comments

build(deps): bump parse-url and snyk

ksuzy31-org/nodejs-goof #31

removed Removal PR

Open 3 months ago 1 comment

build(deps): bump parse-url and snyk

ksuzy31/nodejs-goof #3

removed Removal PR

Open 3 months ago

Bump parse-url from 8.1.0 to 10.0.3 in /app

Mattlk13/hyper #746

8.1.0 → 10.0.3 Major PR

Open 3 months ago

build(deps): bump the npm_and_yarn group across 4 directories with 28 updates

passariello/mobx #20

6.0.0 → 6.0.5 Patch PR

Open 3 months ago

build(deps-dev): bump parse-url from 10.0.2 to 10.0.3 in the minor group

eyereasoner/eye-js #1721

10.0.2 → 10.0.3 Patch PR

Open 3 months ago

chore(deps): bump parse-url from 6.0.0 to 6.0.5 in the npm_and_yarn group across 1 directory

salovka87/gatsby-starter-netlify-cms #1

6.0.0 → 6.0.5 Patch PR

Open 3 months ago

Bump parse-url from 8.1.0 to 10.0.2 in /app

Mattlk13/hyper #735

8.1.0 → 10.0.2 Major PR

Closed 3 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 1 directory with 13 updates

AKJUS/react-apollo #1

5.0.1 → 8.1.0 Major PR

Open 3 months ago

build(deps-dev): bump the minor group across 1 directory with 2 updates

eyereasoner/eye-js #1710

10.0.0 → 10.0.2 Patch PR

Merged 3 months ago

build(deps): bump parse-url and snyk

danilo-marra/nodejs-goof #19

Open 4 months ago

build(deps-dev): bump parse-url from 6.0.0 to 6.0.5

Emadalshamery/execution-apis #2

6.0.0 → 6.0.5 Patch PR

Open 4 months ago

build(deps): bump parse-url and snyk

KevinDNgo/nodejs-goof #44

Open 4 months ago

chore(deps): bump parse-url and snyk

xavierxmorris/snyk-to-html #11

removed Removal PR

Open 5 months ago

build(deps): bump parse-url and snyk

AKJUS/mean #3

removed Removal PR

Open 5 months ago

Bump the npm_and_yarn group with 6 updates

awfixer-sites/awfixer.link #7

7.0.2 → 8.1.0 Major PR

Open 5 months ago 1 comment

Bump parse-url and lerna in /js

utilitywarehouse/customer-tracking-sdk #149

5.0.2 → 8.1.0 Major PR

Closed 5 months ago 1 comment

chore(deps): bump parse-url and documentation

danpaz/bodybuilder #323

7.0.2 → 8.1.0 Major PR

Merged 6 months ago

chore(deps): bump the npm_and_yarn group across 1 directory with 42 updates

RyzinRiley/Yarnpkg #1

6.0.0 → 6.0.5 Patch PR

Open 6 months ago

chore(deps): bump parse-url from 7.0.2 to 8.1.0

AKJUS/blog #9

7.0.2 → 8.1.0 Major PR

Open 6 months ago

Bump parse-url from 5.0.1 to 5.0.8

Dovineowuor/github-profile-readme-generator #6

5.0.1 → 5.0.8 Patch PR

Open 6 months ago

Bump parse-url from 6.0.0 to 6.0.5

alchemyplatform/bundler-spec #3

6.0.0 → 6.0.5 Patch PR

Open 6 months ago

Bump parse-url and gatsby-telemetry

keresifon/gatsby #3

7.0.2 → 8.1.0 Major PR

Merged 6 months ago

build(deps-dev): bump parse-url from 6.0.0 to 6.0.5

draghtnight/execution-apis #2

6.0.0 → 6.0.5 Patch PR

Open 6 months ago

Bump the npm_and_yarn group across 6 directories with 19 updates

ImBIOS/monorepo-benchmarks #2

7.0.2 → 8.1.0 Major PR

Open 6 months ago 2 comments

Bump the npm_and_yarn group with 33 updates

jakemhiller/jakemhiller.github.io #36

5.0.1 → 8.1.0 Major PR

Closed about 1 year ago 1 comment

Bump parse-url from 5.0.2 to 9.2.0 in /app

Mattlk13/hyper #585

5.0.2 → 9.2.0 Major PR

Closed over 1 year ago 1 comment

Bump parse-url and lerna

TheRakeshPurohit/less.js #26

6.0.5 → 8.1.0 Major PR

Closed almost 2 years ago 2 comments

Bump parse-url and lerna

webcomponents/polyfills #564

6.0.5 → 8.1.0 Major PR

Open about 2 years ago 1 comment

Bump parse-url and gatsby

mcaronnewrelic/nru-gat #41

6.0.5 → 8.1.0 Major PR

Merged almost 3 years ago

Bump parse-url and documentation

hexlet-components/js-card-game #22

7.0.2 → 8.1.0 Major PR

Merged almost 3 years ago

Bump parse-url from 7.0.2 to 8.1.0

hexlet-components/js-trees #37

7.0.2 → 8.1.0 Major PR

Merged almost 3 years ago

Bump parse-url from 7.0.2 to 8.1.0

hexlet-components/js-pairs-data #37

7.0.2 → 8.1.0 Major PR

Merged almost 3 years ago

Bump parse-url from 7.0.2 to 8.1.0

hexlet-components/js-points #33

7.0.2 → 8.1.0 Major PR

Merged almost 3 years ago

Bump parse-url and lerna

SolidOS/solidos #189

6.0.5 → 8.1.0 Major PR

Open almost 3 years ago 1 comment

chore(deps): bump parse-url and release-it

walterholohan/react-native-crisp-chat-sdk #84

5.0.1 → 8.1.0 Major PR

Closed about 3 years ago 1 comment

Bump parse-url from 6.0.0 to 8.1.0

Stieneee/simple-zstd #22

6.0.0 → 8.1.0 Major PR

Closed about 3 years ago 2 comments

Bump parse-url and release-it

release-it-plugins/lerna-changelog #243

6.0.2 → 8.1.0 Major PR

Closed about 3 years ago

Bump parse-url and lerna

openstad/openstad-frontend #362

6.0.5 → 8.1.0 Major PR

Closed about 3 years ago 1 comment

Bump parse-url and gatsby-telemetry

amazingrando/forthequeen #17

7.0.2 → 8.1.0 Major PR

Closed about 3 years ago 1 comment

Package Details

Name:	`parse-url`
Ecosystem:	npm
PURL Type:	npm
Package URL:	`pkg:npm/parse-url`
JSON API:	View JSON

Security Advisories

6

Active advisories

CRITICAL 2

HIGH 1

MODERATE 3

View All npm Advisories

Package Information

Description:

An advanced url parser supporting git urls too.

Repository:	https://github.com/IonicaBizau/parse-url
Homepage:	https://github.com/IonicaBizau/parse-url
Latest Release:	`10.0.0` 7 months ago
Dependent Repos:	201,945
Dependent Packages:	471
Downloads:	21,417,278
Ranking:	Top 0.0727% by dependent repos Top 0.0696% by downloads Top 0.1216% by dependent pkgs

PR Status

Open 32 (37.6%)

Merged 11 (12.9%)

Closed 36 (42.4%)

PR Types

Major 28 (32.9%)

Patch 42 (49.4%)

Removal 7 (8.2%)

parse-url

Security Advisories

parse-url parses http URLs incorrectly, making it vulnerable to host name spoofing

Server-Side Request Forgery (SSRF) in GitHub repository ionicabizau/parse-url

Hostname confusion in parse-url

Server-Side Request Forgery in parse-url

Cross site scripting in parse-url

Recent PRs

Package Details

Security Advisories

6

Package Information

PR Status

PR Types

`parse-url`