Package: node-url-parse / 1.5.3-1+deb11u2

Metadata

Package Version Patches format
node-url-parse 1.5.3-1+deb11u2 3.0 (quilt)

Patch series

view the series file
Patch File delta Description
CVE 2022 0686.patch | (download)

index.js | 16 13 + 3 - 0 !
test/test.js | 22 22 + 0 - 0 !
2 files changed, 35 insertions(+), 3 deletions(-)

 handle the case where the port is specified but empty
CVE 2022 0691.patch | (download)

index.js | 3 2 + 1 - 0 !
test/test.js | 10 8 + 2 - 0 !
2 files changed, 10 insertions(+), 3 deletions(-)

 strip all control characters from the beginning of the url
CVE 2022 0512.patch | (download)

index.js | 22 18 + 4 - 0 !
test/test.js | 72 72 + 0 - 0 !
2 files changed, 90 insertions(+), 4 deletions(-)

 correctly handle userinfo containing the at sign