Data

Tools

Indexes

Applications

Experiments

Dependabot

An open index of dependabot pull requests across open source projects.

url-parse

Ecosystem:
npm
Package URL:
pkg:npm/url-parse
Total PRs:
2,553 Dependabot PRs
Latest PR:
about 1 month ago
Unique Repositories:
2,199 repositories
Unique Repos (30 days):
1 repository
Security Advisories
url-parse incorrectly parses hostname / protocol due to unstripped leading control characters.
GHSA-jf5r-8hm2-f872 CVE-2022-0691 MODERATE published over 4 years ago • updated about 1 month ago
Leading control characters in a URL are not stripped when passed into url-parse. This can cause input URLs to be mistakenly be interpreted as a rel...
Path traversal in url-parse
GHSA-9m6j-fcg5-2442 CVE-2021-27515 MODERATE published about 5 years ago • updated 14 days ago
url-parse before 1.5.0 mishandles certain uses of backslash such as http:\/ and interprets the URI as a relative path.
Open Redirect in url-parse
GHSA-pv4c-p2j5-38j4 CVE-2018-3774 CRITICAL published almost 8 years ago • updated 2 months ago
Versions of `url-parse` before 1.4.3 returns the wrong hostname which could lead to Open Redirect, Server Side Request Forgery (SSRF), or Bypass Au...
Open redirect in url-parse
GHSA-hh27-ffr2-f2jc CVE-2021-3664 MODERATE published almost 5 years ago • updated 2 months ago
# Overview Affected versions of npm `url-parse` are vulnerable to URL Redirection to Untrusted Site. # Impact Depending on library usage and att...
Authorization bypass in url-parse
GHSA-rqff-837h-mm52 CVE-2022-0512 MODERATE published over 4 years ago • updated 10 days ago
Authorization Bypass Through User-Controlled Key in NPM url-parse prior to 1.5.6.
View all 8 advisories
Recent PRs
RSS Feed
chore(deps): bump url-parse from 1.4.7 to 1.5.10

matzekFloyd/Portfolio #40

1.4.7 → 1.5.10 Minor PR
Open about 1 month ago 1 comment
matzekFloyd
build(deps): bump the npm_and_yarn group across 3 directories with 17 updates

hashim21223445/marble #8

1.4.6 → 1.4.7 Patch PR
Open about 1 month ago 2 comments
hashim21223445
build(deps-dev): bump url-parse from 1.5.1 to 1.5.10

803142/rs-lang #2

1.5.1 → 1.5.10 Patch PR
Open about 2 months ago 1 comment
803142
Bump the npm_and_yarn group across 2 directories with 17 updates

mkhraisha/essentials-of-blockchain-development-and-security #17

1.5.3 → 1.5.10 Patch PR
Closed 2 months ago 1 comment
mkhraisha
Bump the npm_and_yarn group across 2 directories with 17 updates

mkhraisha/essentials-of-blockchain-development-and-security #16

1.5.3 → 1.5.10 Patch PR
Closed 2 months ago 1 comment
mkhraisha
Bump the npm_and_yarn group across 1 directory with 21 updates

Surfndez/walletlink #2

1.4.7 → 1.5.10 Minor PR
Closed 2 months ago 1 comment
Surfndez
Bump the npm_and_yarn group across 1 directory with 18 updates

joseguzman1337/gocrack-ui #13

1.4.7 → 1.5.10 Minor PR
Open 2 months ago 2 comments
joseguzman1337
chore(deps): bump the npm_and_yarn group across 13 directories with 14 updates

ivan09069/codesandbox-client #96

1.4.7 → 1.5.10 Minor PR
Open 3 months ago 1 comment
ivan09069
Bump url-parse from 1.4.7 to 1.5.10

kurraz-soft/krecipes #7

1.4.7 → 1.5.10 Minor PR
Closed 3 months ago 1 comment
kurraz-soft
chore(deps): bump the npm_and_yarn group across 13 directories with 13 updates

ivan09069/codesandbox-client #92

1.4.7 → 1.5.10 Minor PR
Open 3 months ago 2 comments
ivan09069
npm: bump the npm_and_yarn group across 1 directory with 8 updates

Skitionek/lifelike #36

1.5.3 → 1.5.10 Patch PR
Open 3 months ago 4 comments
Skitionek
build(deps): bump the npm_and_yarn group across 1 directory with 4 updates

madokaisbest/flow #19

1.4.7 → 1.5.10 Minor PR
Closed 3 months ago 1 comment
madokaisbest
Bump the npm_and_yarn group across 4 directories with 21 updates

alexis-opolka/graphql-ts-client #3

1.5.1 → 1.5.10 Patch PR
Closed 3 months ago 1 comment
alexis-opolka
Bump url-parse from 1.4.7 to 1.5.10

erkash/vue-todo #2

1.4.7 → 1.5.10 Minor PR
Closed 3 months ago 1 comment
erkash
chore(deps): bump the npm_and_yarn group across 13 directories with 13 updates

ivan09069/codesandbox-client #91

1.4.7 → 1.5.10 Minor PR
Open 3 months ago 2 comments
ivan09069
Bump the npm_and_yarn group across 33 directories with 5 updates

CxsLucyfer/gecko-dev #471

1.4.3 → 1.5.10 Minor PR
Closed 3 months ago 1 comment
CxsLucyfer
build(deps): bump the npm_and_yarn group across 29 directories with 7 updates

thismahbub/angular #16

1.4.4 → 1.5.10 Minor PR
Closed 3 months ago 1 comment
thismahbub
Bump the npm_and_yarn group across 35 directories with 6 updates

larseggert/firefox #91

1.4.3 → 1.5.10 Minor PR
Closed 3 months ago 1 comment
larseggert
Bump the npm_and_yarn group across 35 directories with 6 updates

larseggert/firefox #90

1.4.3 → 1.5.10 Minor PR
Closed 3 months ago 1 comment
larseggert
Bump the npm_and_yarn group across 15 directories with 6 updates

LearningBackwards/react1.8 #76

1.5.1 → 1.5.10 Patch PR
Open 3 months ago 1 comment
LearningBackwards
Bump the npm_and_yarn group across 30 directories with 7 updates

GloWE3/WebKit-4-Rainbowbeast #49

1.1.9 → 1.5.10 Minor PR
Open 3 months ago 3 comments
GloWE3
build(deps): bump the npm_and_yarn group across 14 directories with 7 updates

machalliance/Migration-Documentation-AI #34

1.5.3 → 1.5.10 Patch PR
Open 3 months ago 1 comment
machalliance
chore(deps): bump the npm_and_yarn group across 13 directories with 15 updates

Dargon789/codesandbox-client #98

1.4.7 → 1.5.10 Minor PR
Open 3 months ago 2 comments
Dargon789
chore(deps): bump the npm_and_yarn group across 13 directories with 13 updates

Dargon789/codesandbox-client #97

1.4.7 → 1.5.10 Minor PR
Closed 3 months ago 3 comments
Dargon789
Bump the npm_and_yarn group across 33 directories with 6 updates

CxsLucyfer/gecko-dev #464

1.4.3 → 1.5.10 Minor PR
Closed 3 months ago 1 comment
CxsLucyfer
Bump the npm_and_yarn group across 31 directories with 6 updates

CxsLucyfer/gecko-dev #463

1.4.3 → 1.5.10 Minor PR
Closed 3 months ago 1 comment
CxsLucyfer
Bump the npm_and_yarn group across 34 directories with 6 updates

GloWE3/WebKit-4-Rainbowbeast #48

1.1.9 → 1.5.10 Minor PR
Open 3 months ago 2 comments
GloWE3
chore(deps): bump the npm_and_yarn group across 13 directories with 14 updates

ivan09069/codesandbox-client #90

1.4.7 → 1.5.10 Minor PR
Open 3 months ago 2 comments
ivan09069
Bump the npm_and_yarn group across 24 directories with 6 updates

alialobidm/react #43

1.5.1 → 1.5.10 Patch PR
Closed 3 months ago 4 comments
alialobidm
Bump the npm_and_yarn group across 33 directories with 7 updates

GloWE3/WebKit-4-Rainbowbeast #47

1.1.9 → 1.5.10 Minor PR
Open 3 months ago 2 comments
GloWE3
Bump the npm_and_yarn group across 34 directories with 6 updates

GloWE3/WebKit-4-Rainbowbeast #42

1.1.9 → 1.5.10 Minor PR
Open 3 months ago 2 comments
GloWE3
Bump the npm_and_yarn group across 30 directories with 8 updates

AKJUS/react #454

1.5.1 → 1.5.10 Patch PR
Open 3 months ago 1 comment
AKJUS
Bump the npm_and_yarn group across 31 directories with 9 updates

AKJUS/react #452

1.5.1 → 1.5.10 Patch PR
Open 3 months ago 1 comment
AKJUS
Bump the npm_and_yarn group across 25 directories with 7 updates

trizist/react #68

1.5.1 → 1.5.10 Patch PR
Closed 3 months ago 1 comment
trizist
Bump the npm_and_yarn group across 26 directories with 8 updates

CatalinCighi/react #28

1.5.1 → 1.5.10 Patch PR
Closed 3 months ago 1 comment
CatalinCighi
Bump the npm_and_yarn group across 25 directories with 7 updates

cptthura-alt/react #41

1.5.1 → 1.5.10 Patch PR
Closed 3 months ago 1 comment
cptthura-alt
Bump the npm_and_yarn group across 25 directories with 7 updates

AIC-HMV/React-19.10-BuildByHMVAustin #56

1.5.1 → 1.5.10 Patch PR
Closed 3 months ago 2 comments
AIC-HMV
Bump the npm_and_yarn group across 40 directories with 5 updates

Guerteltier/WebKit #43

1.1.9 → 1.5.10 Minor PR
Closed 3 months ago 1 comment
Guerteltier
Bump the npm_and_yarn group across 32 directories with 8 updates

GloWE3/WebKit-4-Rainbowbeast #40

1.1.9 → 1.5.10 Minor PR
Open 3 months ago 3 comments
GloWE3
Bump the npm_and_yarn group across 31 directories with 6 updates

ovhcat/Floorp #60

1.4.3 → 1.5.10 Minor PR
Closed 3 months ago 1 comment
ovhcat
Bump the npm_and_yarn group across 40 directories with 5 updates

Jackblanket847/WebKit #41

1.1.9 → 1.5.10 Minor PR
Closed 3 months ago 1 comment
Jackblanket847
Bump the npm_and_yarn group across 25 directories with 7 updates

LesPaul537/react #42

1.5.1 → 1.5.10 Patch PR
Closed 3 months ago 1 comment
LesPaul537
Bump the npm_and_yarn group across 33 directories with 6 updates

zzumiess/LibreSwift #55

1.4.3 → 1.5.10 Minor PR
Closed 3 months ago 1 comment
zzumiess
Bump the npm_and_yarn group across 38 directories with 6 updates

AKJUS/WebKit #1587

1.1.9 → 1.5.10 Minor PR
Open 3 months ago 1 comment
AKJUS
chore(deps): bump the npm_and_yarn group across 28 directories with 6 updates

AKJUS/hygraph-examples #47

1.5.1 → 1.5.10 Patch PR
Open 3 months ago 1 comment
AKJUS
chore(deps): bump the npm_and_yarn group across 28 directories with 5 updates

AKJUS/hygraph-examples #46

1.5.1 → 1.5.10 Patch PR
Open 3 months ago 1 comment
AKJUS
Bump the npm_and_yarn group across 30 directories with 9 updates

JSTONE1111/react #68

1.5.1 → 1.5.10 Patch PR
Closed 4 months ago 1 comment
JSTONE1111
Bump the npm_and_yarn group across 30 directories with 8 updates

AIC-HMV/React-19.10-BuildByHMVAustin #52

1.5.1 → 1.5.10 Patch PR
Closed 4 months ago 2 comments
AIC-HMV
Bump the npm_and_yarn group across 30 directories with 9 updates

alialobidm/react #39

1.5.1 → 1.5.10 Patch PR
Open 4 months ago 3 comments
alialobidm
Bump the npm_and_yarn group across 29 directories with 8 updates

alialobidm/react #35

1.5.1 → 1.5.10 Patch PR
Closed 4 months ago 4 comments
alialobidm
Package Details
Name: url-parse
Ecosystem: npm
PURL Type: npm
Package URL: pkg:npm/url-parse
JSON API: View JSON
Security Advisories

8

Active advisories
CRITICAL 2
MODERATE 6
View All npm Advisories
Package Information
Description:

Small footprint URL parser that works seamlessly across Node.js and browser environments

Repository: https://github.com/unshiftio/url-parse
Homepage: https://github.com/unshiftio/url-parse#readme
Latest Release: 1.5.10
over 4 years ago
Dependent Repos: 2,588,673
Dependent Packages: 2,573
Downloads: 112,492,243
Ranking: Top 0.0093% by dependent repos Top 0.0196% by downloads Top 0.0312% by dependent pkgs
PR Status
Open 1,301 (51.0%)
Merged 104 (4.1%)
Closed 1,047 (41.0%)
PR Types
Major 1 (0.0%)
Minor 1,871 (73.3%)
Patch 578 (22.6%)
Removal 1 (0.0%)