urijs
npm · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| Hostname spoofing via backslashes in URL | urijs | npm | Medium | Fix reported | |
| URIjs Hostname spoofing via backslashes in URL | urijs | npm | High | Fix reported | |
| Incorrect protocol extraction via \r, \n and \t characters | urijs | npm | High | Fix reported | |
| Leading white space bypasses protocol validation | urijs.NET Core 3.1 on Red Hat Enterprise Linux/rh-dotnet31-dotnet | npmRed Hat | Medium | Fix reported | |
| URL Confusion When Scheme Not Supplied in medialize/uri.js | urijs | npm | Medium | Fix reported | |
| Open Redirect in urijs | urijs | npm | Medium | Fix reported | |
| Authorization Bypass Through User-Controlled Key in urijs | urijs.NET Core 5.0 on Red Hat Enterprise Linux/rh-dotnet50-dotnet | npmRed Hat | Medium | Fix reported | |
| URIjs Vulnerable to Hostname spoofing via backslashes in URL | urijs | npm | Medium | Fix reported |