`url-parse`

Ecosystem:
npm

Package URL:
pkg:npm/url-parse

Total PRs:
935 Dependabot PRs

Latest PR:
about 4 hours ago

Unique Repositories:
758 repositories

Unique Repos (30 days):
69 repositories

Security Advisories

Open Redirect in url-parse

GHSA-pv4c-p2j5-38j4 CVE-2018-3774 CRITICAL published about 7 years ago • updated about 1 month ago

Versions of `url-parse` before 1.4.3 returns the wrong hostname which could lead to Open Redirect, Server Side Request Forgery (SSRF), or Bypass Au...

url-parse incorrectly parses hostname / protocol due to unstripped leading control characters.

GHSA-jf5r-8hm2-f872 CVE-2022-0691 MODERATE published over 3 years ago • updated 21 days ago

Leading control characters in a URL are not stripped when passed into url-parse. This can cause input URLs to be mistakenly be interpreted as a rel...

View all 8 advisories

Recent PRs

RSS Feed

build(deps): bump the npm_and_yarn group across 1 directory with 27 updates

theantichris/aoeu-engineering-docs #1

1.5.1 → 1.5.10 Patch PR

Open about 4 hours ago

Bump url-parse from 1.4.7 to 1.5.10 in /examples/useauth-gatsby-auth0

elcrawan/useAuth #6

1.4.7 → 1.5.10 Minor PR

Open about 5 hours ago

Bump url-parse from 1.5.1 to 1.5.10

Centaurioun/keeweb #20

1.5.1 → 1.5.10 Patch PR

Open 4 days ago

Bump the npm_and_yarn group across 1 directory with 25 updates

q1blue/responsible-ai-toolbox #1

1.5.3 → 1.5.10 Patch PR

Open 4 days ago

Bump the npm_and_yarn group across 2 directories with 12 updates

q1blue/ain-js #18

1.5.3 → 1.5.9 Patch PR

Open 4 days ago 1 comment

Bump url-parse from 1.4.7 to 1.5.10 in /webapp

q1blue/eosio-web-ide #3

1.4.7 → 1.5.10 Minor PR

Open 4 days ago

Bump the npm_and_yarn group across 1 directory with 32 updates

ibiscum/Frontend-Development-Projects-with-Vue.js-3 #4

1.4.7 → 1.5.10 Minor PR

Open 5 days ago

Bump the npm_and_yarn group across 1 directory with 22 updates

Mgfromthe503/Windows-Machine-Learning #1

1.4.7 → 1.5.10 Minor PR

Open 5 days ago

Bump url-parse from 1.5.3 to 1.5.10 in /3-Data-Visualization/13-meaningful-visualizations/starter

abhinavm24/Data-Science-For-Beginners #5

1.5.3 → 1.5.10 Patch PR

Open 9 days ago

Bump url-parse from 1.4.7 to 1.5.10

abhinavm24/StackRabbit #2

1.4.7 → 1.5.10 Minor PR

Open 9 days ago

chore(deps): bump the npm_and_yarn group across 1 directory with 26 updates

pagerinc/s1ngularity-BQJ0K5 #314

1.5.4 → 1.5.10 Patch PR

Open 9 days ago

chore(deps): bump the npm_and_yarn group across 1 directory with 25 updates

pagerinc/s1ngularity-Iyta95 #5

1.5.1 → 1.5.10 Patch PR

Open 9 days ago

chore(deps): bump the npm_and_yarn group across 1 directory with 23 updates

pagerinc/s1ngularity-wghgfx #617

1.4.7 → 1.5.10 Minor PR

Open 9 days ago

Bump url-parse from 1.4.4 to 1.5.10

balajirajput96/vscode-live-server-plus-plus #79

1.4.4 → 1.5.10 Minor PR

Open 9 days ago

build(deps): bump the npm_and_yarn group across 2 directories with 18 updates

hashim21223445/marble #5

1.4.6 → 1.4.7 Patch PR

Open 9 days ago

Bump url-parse from 1.5.3 to 1.5.10

SvenLameir/KardsOnline #20

1.5.3 → 1.5.10 Patch PR

Open 10 days ago

chore(deps): bump the npm_and_yarn group across 1 directory with 29 updates

AndrewWUw/cypress-realworld-app #1

1.5.3 → 1.5.10 Patch PR

Open 11 days ago

Bump the npm_and_yarn group across 1 directory with 21 updates

stage-tech/s1ngularity-repository-fbuxt #9

1.4.7 → 1.5.10 Minor PR

Open 11 days ago

Bump the npm_and_yarn group across 1 directory with 20 updates

stage-tech/s1ngularity-repository-fbuxt #8

1.4.7 → 1.5.10 Minor PR

Closed 11 days ago 1 comment

Bump the npm_and_yarn group across 1 directory with 19 updates

stage-tech/s1ngularity-repository-fbuxt #7

1.4.7 → 1.5.10 Minor PR

Closed 11 days ago 1 comment

Bump the npm_and_yarn group across 1 directory with 16 updates

stage-tech/s1ngularity-repository-fbuxt #6

1.4.7 → 1.5.10 Minor PR

Open 11 days ago

Bump the npm_and_yarn group across 1 directory with 18 updates

stage-tech/s1ngularity-repository-fbuxt #5

1.4.7 → 1.5.10 Minor PR

Closed 11 days ago 1 comment

Bump url-parse from 1.4.7 to 1.5.10

grantoz/patcher #4

1.4.7 → 1.5.10 Minor PR

Merged 12 days ago

Bump the npm_and_yarn group across 1 directory with 25 updates

ANT0071/30-Days-Of-React #1

1.4.7 → 1.5.10 Minor PR

Open 12 days ago

Bump url-parse from 1.4.7 to 1.5.10

miguelmx/erp_laravel #2

1.4.7 → 1.5.10 Minor PR

Open 15 days ago

Bump url-parse from 1.4.4 to 1.5.10 in /9.forms/9.activity/code/@solution

sumit12690/angular-course #4

1.4.4 → 1.5.10 Minor PR

Open 17 days ago

Bump url-parse from 1.4.7 to 1.5.10

Mortida/noonan #17

1.4.7 → 1.5.10 Minor PR

Merged 17 days ago

Bump url-parse and original in /frontend

joffcrabtree/versionpress #7

1.1.9 → 1.5.10 Minor PR

Open 18 days ago

⬆️ Bump the npm_and_yarn group across 1 directory with 24 updates

sparck75/orderbook #2

1.5.1 → 1.5.10 Patch PR

Open 18 days ago

Bump the npm_and_yarn group across 1 directory with 30 updates

sparck75/potluck-vaults #2

1.5.3 → 1.5.10 Patch PR

Open 18 days ago

Bump querystringify, original and url-parse in /frontend

joffcrabtree/versionpress #4

1.1.9 → 1.5.10 Minor PR

Open 18 days ago

Bump url-parse and original

sparck75/react-stockcharts #2

1.2.0 → 1.5.10 Minor PR

Open 18 days ago

Bump url-parse and original in /frontend

coy247/versionpress #6

1.1.9 → 1.5.10 Minor PR

Open 18 days ago

Bump the npm_and_yarn group across 1 directory with 22 updates

Centaurioun/CopyTranslator #2

1.4.7 → 1.5.10 Minor PR

Open 18 days ago

Bump url-parse from 1.5.1 to 1.5.10 in /client-samples/vue

Centaurioun/vosk-server #23

1.5.1 → 1.5.10 Patch PR

Open 18 days ago

Bump the npm_and_yarn group across 1 directory with 25 updates

thegoodeth12/vanity-safe #8

1.4.7 → 1.5.10 Minor PR

Open 18 days ago

Bump the npm_and_yarn group across 1 directory with 24 updates

thegoodeth12/vanity-safe #7

1.4.7 → 1.5.10 Minor PR

Closed 18 days ago 2 comments

chore(deps): bump url-parse from 1.4.7 to 1.5.10

thegoodeth12/deliverybot #3

1.4.7 → 1.5.10 Minor PR

Open 18 days ago

Bump url-parse from 1.4.4 to 1.5.10 in /test/apps/rails6

benjaminyzg/brakeman #2

1.4.4 → 1.5.10 Minor PR

Open 18 days ago

Bump the npm_and_yarn group across 1 directory with 21 updates

Centaurioun/CopyTranslator #1

1.4.7 → 1.5.10 Minor PR

Closed 18 days ago 2 comments

Bump the npm_and_yarn group across 1 directory with 23 updates

PeezoslugOG/warp-v #3

1.5.3 → 1.5.10 Patch PR

Open 18 days ago

Bump url-parse from 1.4.7 to 1.5.10

uxhamzah/ApplicationPengaduan #5

1.4.7 → 1.5.10 Minor PR

Open 18 days ago

Bump url-parse from 1.4.7 to 1.5.10 in /ui

sparck75/sourcify #17

1.4.7 → 1.5.10 Minor PR

Open 18 days ago

Bump the npm_and_yarn group across 1 directory with 22 updates

PeezoslugOG/warp-v #2

1.5.3 → 1.5.10 Patch PR

Closed 18 days ago 1 comment

Bump the npm_and_yarn group across 1 directory with 19 updates

qskeksq/artisan-static #24

1.4.7 → 1.5.10 Minor PR

Open 18 days ago

Bump url-parse from 1.4.7 to 1.5.10

Eyhenij/vibor #4

1.4.7 → 1.5.10 Minor PR

Open 18 days ago

Bump url-parse from 1.4.7 to 1.5.10

uxhamzah/posyandu-ai-app #5

1.4.7 → 1.5.10 Minor PR

Open 18 days ago

Bump url-parse from 1.5.1 to 1.5.10 in /www

dappelbe/myWISE #3

1.5.1 → 1.5.10 Patch PR

Open 18 days ago

chore(deps): bump the npm_and_yarn group across 1 directory with 32 updates

cerealean/angular-calendar-scheduler #1

1.4.7 → 1.5.10 Minor PR

Open 18 days ago

Bump url-parse from 1.4.7 to 1.5.10

AdamTV/WEB422-A6 #3

1.4.7 → 1.5.10 Minor PR

Open 18 days ago

Package Details

Name:	`url-parse`
Ecosystem:	npm
PURL Type:	npm
Package URL:	`pkg:npm/url-parse`
JSON API:	View JSON

Security Advisories

8

Active advisories

CRITICAL 2

MODERATE 6

View All npm Advisories

Package Information

Description:

Small footprint URL parser that works seamlessly across Node.js and browser environments

Repository:	https://github.com/unshiftio/url-parse
Homepage:	https://github.com/unshiftio/url-parse#readme
Latest Release:	`1.5.10` over 3 years ago
Dependent Repos:	2,588,673
Dependent Packages:	2,573
Downloads:	112,492,243
Ranking:	Top 0.0093% by dependent repos Top 0.0196% by downloads Top 0.0312% by dependent pkgs

PR Status

Open 342 (36.8%)

Merged 79 (8.5%)

Closed 407 (43.8%)

PR Types

Minor 581 (62.5%)

Major 1 (0.1%)

Patch 245 (26.4%)

url-parse

Security Advisories

Open Redirect in url-parse

url-parse incorrectly parses hostname / protocol due to unstripped leading control characters.

url-parse Incorrectly parses URLs that include an '@'

Improper Validation and Sanitization in url-parse

Authorization bypass in url-parse

Recent PRs

Package Details

Security Advisories

8

Package Information

PR Status

PR Types

`url-parse`