medium5.3
CVE-2020-8124
Insufficient validation and sanitization of user input exists in url-parse npm package version 1.4.4 and earlier may allow attacker to bypass security checks.
Impact
Insufficient validation and sanitization of user input exists in url-parse npm package version 1.4.4 and earlier may allow attacker to bypass security checks.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Url-Parse Project | Url-Parse | through 1.4.4 |