CVE-2022-0686

CRITICAL CVSS: 9.1 Published: 2022-02-20 Modified: 2026-06-17

Description

Authorization Bypass Through User-Controlled Key in NPM url-parse prior to 1.5.8.

Affected Platforms

Url-Parse Project Url-Parse

Weakness Type

CWE-639, CWE-639

References