parse-url
Ecosystem:
npm
npm
Package URL:
pkg:npm/parse-url
Total PRs:
68 Dependabot PRs
68 Dependabot PRs
Latest PR:
8 days ago
8 days ago
Unique Repositories:
58 repositories
58 repositories
Unique Repos (30 days):
8 repositories
8 repositories
Security Advisories
Hostname confusion in parse-url
GHSA-4p35-cfcx-8653
CVE-2022-0722
HIGH
published about 3 years ago
• updated about 2 months ago
Exposure of Sensitive Information to an Unauthorized Actor via hostname confusion in GitHub repository ionicabizau/parse-url prior to 6.0.1
Server-Side Request Forgery (SSRF) in GitHub repository ionicabizau/parse-url
GHSA-j9fq-vwqv-2fm2
CVE-2022-2900
CRITICAL
published almost 3 years ago
• updated 2 months ago
Server-Side Request Forgery (SSRF) in GitHub repository ionicabizau/parse-url prior to 8.1.0.
Server-Side Request Forgery in parse-url
GHSA-7f3x-x4pr-wqhj
CVE-2022-2216
CRITICAL
published about 3 years ago
• updated about 2 months ago
Server-Side Request Forgery (SSRF) in GitHub repository ionicabizau/parse-url prior to 7.0.0.
parse-url parses http URLs incorrectly, making it vulnerable to host name spoofing
GHSA-pqw5-jmp5-px4v
CVE-2022-3224
MODERATE
published almost 3 years ago
• updated about 1 month ago
parse-url prior to 8.1.0 is vulnerable to Misinterpretation of Input. parse-url parses certain http or https URLs incorrectly, identifying the URL'...
Cross site scripting in parse-url
GHSA-jpp7-7chh-cf67
CVE-2022-2218
MODERATE
published about 3 years ago
• updated 3 months ago
Cross-site Scripting (XSS) - Stored in GitHub repository ionicabizau/parse-url prior to 7.0.0.
Recent PRs (filtered by: Open , Patch PRs )
Bump the npm_and_yarn group across 1 directory with 30 updates
6.0.0 → 6.0.5
Patch PR
Open
8 days ago
build(deps): bump the npm_and_yarn group across 1 directory with 19 updates
5.0.3 → 5.0.8
Patch PR
Open
8 days ago
2 comments
build(deps): bump the npm_and_yarn group across 4 directories with 28 updates
passariello/mobx #20
6.0.0 → 6.0.5
Patch PR
Open
21 days ago
build(deps-dev): bump parse-url from 10.0.2 to 10.0.3 in the minor group
eyereasoner/eye-js #1721
10.0.2 → 10.0.3
Patch PR
Open
25 days ago
build(deps-dev): bump parse-url from 6.0.0 to 6.0.5
Emadalshamery/execution-apis #2
6.0.0 → 6.0.5
Patch PR
Open
about 2 months ago
chore(deps): bump the npm_and_yarn group across 1 directory with 42 updates
6.0.0 → 6.0.5
Patch PR
Open
3 months ago
Bump parse-url from 5.0.1 to 5.0.8
Dovineowuor/github-profile-readme-generator #6
5.0.1 → 5.0.8
Patch PR
Open
3 months ago
Bump parse-url from 6.0.0 to 6.0.5
alchemyplatform/bundler-spec #3
6.0.0 → 6.0.5
Patch PR
Open
3 months ago
Bump parse-url from 6.0.0 to 6.0.5
MyCryptoHQ/knowledge-base #168
6.0.0 → 6.0.5
Patch PR
Open
almost 3 years ago
Bump parse-url from 6.0.0 to 6.0.5
radiokashana/radiokashana.github.io #44
6.0.0 → 6.0.5
Patch PR
Open
almost 3 years ago
2 comments
Package Details
| Name: | parse-url |
| Ecosystem: | npm |
| PURL Type: | npm |
| Package URL: | pkg:npm/parse-url |
| JSON API: | View JSON |
Security Advisories
Package Information
Description:
An advanced url parser supporting git urls too.
| Repository: | https://github.com/IonicaBizau/parse-url |
| Homepage: | https://github.com/IonicaBizau/parse-url |
| Latest Release: |
10.0.0
5 months ago |
| Dependent Repos: | 201,945 |
| Dependent Packages: | 471 |
| Downloads: | 21,417,278 |
| Ranking: | Top 0.0727% by dependent repos Top 0.0696% by downloads Top 0.1216% by dependent pkgs |