CVSS 3.1
6.1 mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:NCVE-2022-3224
Misinterpretation of Input in GitHub repository ionicabizau/parse-url prior to 8.1.0.
Severity
- EPSS
- 0.8% chance of exploitation in the next 30 days; higher than 56% of CVEs (scores of 2026-10-31)
- CWE
- CWE-115
- Published
- Modified
- Record from
- the NVD, synced
Affected
- parse-url_project:parse-url
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-pqw5-jmp5-px4v | npm | parse-url | <8.1.0 | 8.1.0 |
References
- https://github.com/ionicabizau/parse-url/commit/9cacf38de02db0fb1358bd6ec04543e523cd6a8e
- https://huntr.dev/bounties/3587a567-7fcd-4702-b7c9-d9ca565e3c62
- https://github.com/ionicabizau/parse-url/commit/9cacf38de02db0fb1358bd6ec04543e523cd6a8e
- https://huntr.dev/bounties/3587a567-7fcd-4702-b7c9-d9ca565e3c62