Data

Tools

Indexes

Applications

Experiments

Dependabot

An open index of dependabot pull requests across open source projects.

url-parse

Ecosystem:
npm
Package URL:
pkg:npm/url-parse
Total PRs:
2,556 Dependabot PRs
Latest PR:
about 19 hours ago
Unique Repositories:
2,202 repositories
Unique Repos (30 days):
1 repository
Security Advisories
url-parse incorrectly parses hostname / protocol due to unstripped leading control characters.
GHSA-jf5r-8hm2-f872 CVE-2022-0691 MODERATE published over 4 years ago • updated about 1 month ago
Leading control characters in a URL are not stripped when passed into url-parse. This can cause input URLs to be mistakenly be interpreted as a rel...
Path traversal in url-parse
GHSA-9m6j-fcg5-2442 CVE-2021-27515 MODERATE published about 5 years ago • updated 16 days ago
url-parse before 1.5.0 mishandles certain uses of backslash such as http:\/ and interprets the URI as a relative path.
Open Redirect in url-parse
GHSA-pv4c-p2j5-38j4 CVE-2018-3774 CRITICAL published almost 8 years ago • updated 2 months ago
Versions of `url-parse` before 1.4.3 returns the wrong hostname which could lead to Open Redirect, Server Side Request Forgery (SSRF), or Bypass Au...
Open redirect in url-parse
GHSA-hh27-ffr2-f2jc CVE-2021-3664 MODERATE published almost 5 years ago • updated 2 months ago
# Overview Affected versions of npm `url-parse` are vulnerable to URL Redirection to Untrusted Site. # Impact Depending on library usage and att...
Authorization bypass in url-parse
GHSA-rqff-837h-mm52 CVE-2022-0512 MODERATE published over 4 years ago • updated 12 days ago
Authorization Bypass Through User-Controlled Key in NPM url-parse prior to 1.5.6.
View all 8 advisories
Recent PRs (filtered by: Closed , Patch PRs )
RSS Feed Clear filter
Bump the npm_and_yarn group across 2 directories with 17 updates

mkhraisha/essentials-of-blockchain-development-and-security #17

1.5.3 → 1.5.10 Patch PR
Closed 2 months ago 1 comment
mkhraisha
Bump the npm_and_yarn group across 2 directories with 17 updates

mkhraisha/essentials-of-blockchain-development-and-security #16

1.5.3 → 1.5.10 Patch PR
Closed 2 months ago 1 comment
mkhraisha
Bump the npm_and_yarn group across 4 directories with 21 updates

alexis-opolka/graphql-ts-client #3

1.5.1 → 1.5.10 Patch PR
Closed 3 months ago 1 comment
alexis-opolka
Bump the npm_and_yarn group across 24 directories with 6 updates

alialobidm/react #43

1.5.1 → 1.5.10 Patch PR
Closed 4 months ago 4 comments
alialobidm
Bump the npm_and_yarn group across 25 directories with 7 updates

trizist/react #68

1.5.1 → 1.5.10 Patch PR
Closed 4 months ago 1 comment
trizist
Bump the npm_and_yarn group across 26 directories with 8 updates

CatalinCighi/react #28

1.5.1 → 1.5.10 Patch PR
Closed 4 months ago 1 comment
CatalinCighi
Bump the npm_and_yarn group across 25 directories with 7 updates

cptthura-alt/react #41

1.5.1 → 1.5.10 Patch PR
Closed 4 months ago 1 comment
cptthura-alt
Bump the npm_and_yarn group across 25 directories with 7 updates

AIC-HMV/React-19.10-BuildByHMVAustin #56

1.5.1 → 1.5.10 Patch PR
Closed 4 months ago 2 comments
AIC-HMV
Bump the npm_and_yarn group across 25 directories with 7 updates

LesPaul537/react #42

1.5.1 → 1.5.10 Patch PR
Closed 4 months ago 1 comment
LesPaul537
Bump the npm_and_yarn group across 30 directories with 9 updates

JSTONE1111/react #68

1.5.1 → 1.5.10 Patch PR
Closed 4 months ago 1 comment
JSTONE1111
Bump the npm_and_yarn group across 30 directories with 8 updates

AIC-HMV/React-19.10-BuildByHMVAustin #52

1.5.1 → 1.5.10 Patch PR
Closed 4 months ago 2 comments
AIC-HMV
Bump the npm_and_yarn group across 29 directories with 8 updates

alialobidm/react #35

1.5.1 → 1.5.10 Patch PR
Closed 4 months ago 4 comments
alialobidm
Bump the npm_and_yarn group across 30 directories with 7 updates

michaelmendieta/react #43

1.5.1 → 1.5.10 Patch PR
Closed 4 months ago 1 comment
michaelmendieta
Bump the npm_and_yarn group across 27 directories with 8 updates

Zaid-maker/react #122

1.5.1 → 1.5.10 Patch PR
Closed 4 months ago 2 comments
Zaid-maker
chore(deps): bump the npm_and_yarn group across 30 directories with 6 updates

AKJUS/hygraph-examples #43

1.5.1 → 1.5.10 Patch PR
Closed 4 months ago 2 comments
AKJUS
Bump the npm_and_yarn group across 30 directories with 9 updates

ANT0071/react #30

1.5.1 → 1.5.10 Patch PR
Closed 4 months ago 1 comment
ANT0071
Bump the npm_and_yarn group across 30 directories with 8 updates

cptthura-alt/react #30

1.5.1 → 1.5.10 Patch PR
Closed 4 months ago 1 comment
cptthura-alt
Bump the npm_and_yarn group across 30 directories with 8 updates

basersalm24/react #33

1.5.1 → 1.5.10 Patch PR
Closed 4 months ago 1 comment
basersalm24
Bump the npm_and_yarn group across 13 directories with 7 updates

stix26/react #25

1.5.1 → 1.5.10 Patch PR
Closed 4 months ago 2 comments
stix26
Bump the npm_and_yarn group across 31 directories with 8 updates

Easystuff2buy/react #30

1.5.1 → 1.5.10 Patch PR
Closed 4 months ago 1 comment
Easystuff2buy
Bump the npm_and_yarn group across 24 directories with 6 updates

whou-v/react #28

1.5.1 → 1.5.10 Patch PR
Closed 4 months ago 1 comment
whou-v
Bump the npm_and_yarn group across 23 directories with 7 updates

CatalinCighi/react #23

1.5.1 → 1.5.10 Patch PR
Closed 4 months ago 1 comment
CatalinCighi
Bump the npm_and_yarn group across 12 directories with 6 updates

Aremixdj/react #16

1.5.1 → 1.5.10 Patch PR
Closed 4 months ago 1 comment
Aremixdj
Bump the npm_and_yarn group across 24 directories with 6 updates

michaelmendieta/react #36

1.5.1 → 1.5.10 Patch PR
Closed 4 months ago 1 comment
michaelmendieta
Bump the npm_and_yarn group across 22 directories with 7 updates

developer982/react #22

1.5.1 → 1.5.10 Patch PR
Closed 4 months ago 1 comment
developer982
Bump the npm_and_yarn group across 20 directories with 8 updates

firetop0011/react #21

1.5.1 → 1.5.10 Patch PR
Closed 4 months ago 1 comment
firetop0011
Bump the npm_and_yarn group across 18 directories with 8 updates

firetop0011/react #20

1.5.1 → 1.5.10 Patch PR
Closed 4 months ago 1 comment
firetop0011
Bump the npm_and_yarn group across 22 directories with 7 updates

Easystuff2buy/react #28

1.5.1 → 1.5.10 Patch PR
Closed 4 months ago 1 comment
Easystuff2buy
chore(deps): Bump the npm_and_yarn group across 10 directories with 4 updates

uniquenode/cube #25

1.5.3 → 1.5.10 Patch PR
Closed 4 months ago 1 comment
uniquenode
Bump the npm_and_yarn group across 22 directories with 6 updates

JohnDaWalka/react #27

1.5.1 → 1.5.10 Patch PR
Closed 4 months ago 1 comment
JohnDaWalka
Bump the npm_and_yarn group across 22 directories with 6 updates

Zaid-maker/react #110

1.5.1 → 1.5.10 Patch PR
Closed 4 months ago 2 comments
Zaid-maker
Bump url-parse from 1.5.6 to 1.5.9

DavidRigueira/PuntuacionesJugadoresFrontent #51

1.5.6 → 1.5.9 Patch PR
Closed 4 months ago 1 comment
DavidRigueira
Bump the npm_and_yarn group across 23 directories with 6 updates

AIC-HMV/React-19.10-BuildByHMVAustin #39

1.5.1 → 1.5.10 Patch PR
Closed 4 months ago 2 comments
AIC-HMV
Bump the npm_and_yarn group across 20 directories with 8 updates

CatalinCighi/react #21

1.5.1 → 1.5.10 Patch PR
Closed 4 months ago 1 comment
CatalinCighi
Bump the npm_and_yarn group across 23 directories with 6 updates

JohnDaWalka/react #26

1.5.1 → 1.5.10 Patch PR
Closed 4 months ago 1 comment
JohnDaWalka
Bump the npm_and_yarn group across 20 directories with 7 updates

cptthura-alt/react #23

1.5.1 → 1.5.10 Patch PR
Closed 4 months ago 1 comment
cptthura-alt
Bump the npm_and_yarn group across 24 directories with 8 updates

Easystuff2buy/react #21

1.5.1 → 1.5.10 Patch PR
Closed 4 months ago 1 comment
Easystuff2buy
Bump the npm_and_yarn group across 20 directories with 7 updates

morningstarxcdcode/react #62

1.5.1 → 1.5.10 Patch PR
Closed 4 months ago 1 comment
morningstarxcdcode
Bump the npm_and_yarn group across 20 directories with 7 updates

passariello/react #123

1.5.1 → 1.5.10 Patch PR
Closed 4 months ago 1 comment
passariello
chore(deps): Bump the npm_and_yarn group across 15 directories with 6 updates

uniquenode/cube #17

1.5.3 → 1.5.10 Patch PR
Closed 4 months ago 1 comment
uniquenode
Bump the npm_and_yarn group across 20 directories with 7 updates

whou-v/react #25

1.5.1 → 1.5.10 Patch PR
Closed 4 months ago 1 comment
whou-v
Bump the npm_and_yarn group across 25 directories with 8 updates

morningstarxcdcode/react #59

1.5.1 → 1.5.10 Patch PR
Closed 4 months ago 1 comment
morningstarxcdcode
Bump the npm_and_yarn group across 11 directories with 7 updates

LearningBackwards/react1.8 #63

1.5.1 → 1.5.10 Patch PR
Closed 4 months ago 2 comments
LearningBackwards
Bump the npm_and_yarn group across 22 directories with 9 updates

alialobidm/react #24

1.5.1 → 1.5.10 Patch PR
Closed 4 months ago 2 comments
alialobidm
Bump the npm_and_yarn group across 25 directories with 8 updates

basersalm24/react #22

1.5.1 → 1.5.10 Patch PR
Closed 4 months ago 1 comment
basersalm24
Bump the npm_and_yarn group across 20 directories with 7 updates

Zaid-maker/react #105

1.5.1 → 1.5.10 Patch PR
Closed 4 months ago 2 comments
Zaid-maker
Bump the npm_and_yarn group across 26 directories with 9 updates

Easystuff2buy/react #20

1.5.1 → 1.5.10 Patch PR
Closed 4 months ago 1 comment
Easystuff2buy
Bump the npm_and_yarn group across 26 directories with 9 updates

LesPaul537/react #21

1.5.1 → 1.5.10 Patch PR
Closed 4 months ago 1 comment
LesPaul537
Bump url-parse from 1.5.3 to 1.5.10

haru/radvent #4

1.5.3 → 1.5.10 Patch PR
Closed 4 months ago 1 comment
haru
Bump the npm_and_yarn group across 26 directories with 9 updates

basersalm24/react #21

1.5.1 → 1.5.10 Patch PR
Closed 4 months ago 1 comment
basersalm24
Package Details
Name: url-parse
Ecosystem: npm
PURL Type: npm
Package URL: pkg:npm/url-parse
JSON API: View JSON
Security Advisories

8

Active advisories
CRITICAL 2
MODERATE 6
View All npm Advisories
Package Information
Description:

Small footprint URL parser that works seamlessly across Node.js and browser environments

Repository: https://github.com/unshiftio/url-parse
Homepage: https://github.com/unshiftio/url-parse#readme
Latest Release: 1.5.10
over 4 years ago
Dependent Repos: 2,588,673
Dependent Packages: 2,573
Downloads: 112,492,243
Ranking: Top 0.0093% by dependent repos Top 0.0196% by downloads Top 0.0312% by dependent pkgs
PR Status
Open 1,303 (51.0%)
Merged 104 (4.1%)
Closed 1,048 (41.0%)
PR Types
Major 1 (0.0%)
Minor 1,874 (73.3%)
Patch 578 (22.6%)
Removal 1 (0.0%)