Package: node-url-parse / 1.2.0-2+deb10u1
Metadata
Package | Version | Patches format |
---|---|---|
node-url-parse | 1.2.0-2+deb10u1 | 3.0 (quilt) |
Patch series
view the series filePatch | File delta | Description |
---|---|---|
CVE 2018 3774.diff | (download) |
index.js |
9 8 + 1 - 0 ! |
fix for cve-2018-3774 |
CVE 2020 8124.diff | (download) |
index.js |
18 17 + 1 - 0 ! |
fix cve 2020-8124 Insufficient validation and sanitization of user input exists in url-parse npm package version 1.4.4 and earlier may allow attacker to bypass security checks. |
1