CVE-2022-0512

Authorization bypass in url-parse

Description

Authorization Bypass Through User-Controlled Key in NPM url-parse prior to 1.5.6.

Patch Available

Fix available through Seal Security. No upgrade required, protect your application instantly.

Fix without upgrading

Score

5.3

Severity

Medium

Ecosystem

JavaScript

Publish Date

February 14, 2022

Modified Date

February 22, 2026

Score Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Affected Versions