This repository has been archived by the owner on Jan 18, 2024. It is now read-only.
CVE-2021-3664 (Medium) detected in url-parse-1.4.7.tgz #40
Labels
security vulnerability
Security vulnerability detected by WhiteSource
CVE-2021-3664 - Medium Severity Vulnerability
Small footprint URL parser that works seamlessly across Node.js and browser environments
Library home page: https://registry.npmjs.org/url-parse/-/url-parse-1.4.7.tgz
Path to dependency file: /package.json
Path to vulnerable library: /node_modules/url-parse/package.json
Dependency Hierarchy:
Found in base branch: master
url-parse is vulnerable to URL Redirection to Untrusted Site
Publish Date: 2021-07-26
URL: CVE-2021-3664
Base Score Metrics:
Type: Upgrade version
Origin: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3664
Release Date: 2021-07-26
Fix Resolution (url-parse): 1.5.2
Direct dependency fix Resolution (@angular-devkit/build-angular): 0.1000.5
Step up your Open Source Security Game with Mend here
The text was updated successfully, but these errors were encountered: