-
-
Notifications
You must be signed in to change notification settings - Fork 0
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Cross site scripting in parse-url #106
Labels
Auto Create Issues
Label for Auto Created Issues
do-not-autoclose
Make bot can't close an Issues or PRs
Moderate
This label for Security Severity only
Security
Label for Security Issues
Milestone
Comments
TheKingTermux
added
Security
Label for Security Issues
Auto Create Issues
Label for Auto Created Issues
labels
Aug 15, 2022
Stale issue message |
github-actions
bot
added
the
no-issue-activity
Label for Automatic Bot for Closing the Issues or PRs if not fixed anything in several days
label
Nov 21, 2022
P |
github-actions
bot
removed
the
no-issue-activity
Label for Automatic Bot for Closing the Issues or PRs if not fixed anything in several days
label
Nov 22, 2022
Isu ini sudah tidak ada perkembangan |
github-actions
bot
added
the
no-issue-activity
Label for Automatic Bot for Closing the Issues or PRs if not fixed anything in several days
label
Mar 6, 2023
TheKingTermux
removed
the
no-issue-activity
Label for Automatic Bot for Closing the Issues or PRs if not fixed anything in several days
label
Mar 14, 2023
Isu ini sudah tidak ada perkembangan |
github-actions
bot
added
the
no-issue-activity
Label for Automatic Bot for Closing the Issues or PRs if not fixed anything in several days
label
Jul 9, 2023
TheKingTermux
removed
the
no-issue-activity
Label for Automatic Bot for Closing the Issues or PRs if not fixed anything in several days
label
Jul 17, 2023
Isu ini sudah tidak ada perkembangan |
github-actions
bot
added
the
no-issue-activity
Label for Automatic Bot for Closing the Issues or PRs if not fixed anything in several days
label
Sep 16, 2023
github-actions
bot
removed
the
no-issue-activity
Label for Automatic Bot for Closing the Issues or PRs if not fixed anything in several days
label
Sep 25, 2023
Isu ini sudah tidak ada perkembangan |
github-actions
bot
added
the
no-issue-activity
Label for Automatic Bot for Closing the Issues or PRs if not fixed anything in several days
label
Nov 25, 2023
TheKingTermux
removed
the
no-issue-activity
Label for Automatic Bot for Closing the Issues or PRs if not fixed anything in several days
label
Nov 29, 2023
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Labels
Auto Create Issues
Label for Auto Created Issues
do-not-autoclose
Make bot can't close an Issues or PRs
Moderate
This label for Security Severity only
Security
Label for Security Issues
Description
Cross-site Scripting (XSS) - Stored in GitHub repository ionicabizau/parse-url prior to 7.0.0.
Severity Check
Severity Number
6.1
CVSS base metrics
Attack vector
Network
Attack complexity
Low
Privileges required
None
User interaction
Required
Scope
Changed
Confidentiality
Low
Integrity
Low
Availability
None
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Weaknesses
CWE-79
CVE ID
CVE-2022-2218
GHSA ID
GHSA-jpp7-7chh-cf67
Information
Package
parse-url (npm)
Affected versions
< 6.0.1
Patched versions
6.0.1
References
https://nvd.nist.gov/vuln/detail/CVE-2022-2218
IonicaBizau/parse-url@21c72ab
https://huntr.dev/bounties/024912d3-f103-4daf-a1d0-567f4d9f2bf5
The text was updated successfully, but these errors were encountered: