u
url-parse project
Security Risk Profile
66
/100
highSecurity Risk Score
Comprehensive risk assessment based on 8 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from July 30, 2018 to present
8
Total CVEs
4
Critical+High
0
Exploited
0
Unpatched
Threat Assessment
Avg CVSS
7.5
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
0
Critical/High
Risk Level
66/100
high
Severity Distribution
Critical
3High
1Medium
4Low
0Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
0Age Distribution
Common Weaknesses (CWE)
1
Input Validation
3
2
SSRF
2
3
XSS
1
Most Affected Products
1. IBM Data Virtualization on Cloud Pak for Data12
2. IBM Watson Query on Cloud Pak for Data12
3. Url-parse Project Url-parse Node.js7
4. npm/url-parse4
5. redhat/url-parse3
Recent Vulnerabilities
See more →CVE-2022-0691
CVSS 9.8critical
Authorization Bypass Through User-Controlled Key in unshiftio/url-parse
Feb 21, 2022
CVE-2022-0686
CVSS 9.1critical
Authorization Bypass Through User-Controlled Key in unshiftio/url-parse
Feb 20, 2022
CVE-2022-0639
CVSS 6.5medium
Authorization Bypass Through User-Controlled Key in unshiftio/url-parse
Feb 17, 2022
CVE-2022-0512
CVSS 8.8high
Authorization Bypass Through User-Controlled Key in unshiftio/url-parse
Jan 7, 2022
CVE-2021-3664
CVSS 5.3medium
Open Redirect in unshiftio/url-parse
Jul 26, 2021
CVE-2021-27515
CVSS 5.3medium
Feb 21, 2021
CVE-2020-8124
CVSS 5.3medium
Feb 4, 2020🔧 No Patch
CVE-2018-3774
CVSS 10.0critical
Jul 30, 2018
Monitor url-parse project in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.