← Database

CVE-2022-0691

CRITICAL CVSS: 9.8 Published: 2022-02-21 Modified: 2026-06-17

Description

Authorization Bypass Through User-Controlled Key in NPM url-parse prior to 1.5.9.

Affected Platforms

Url-Parse Project Url-Parse

Weakness Type

CWE-639, CWE-639

References