CVE-2021-3664 @ Npm-url-parse-1.4.4

[cx-svetlana-shur]

Vulnerable Package issue exists @ Npm-url-parse-1.4.4 in branch main

url-parse before 1.5.2 is vulnerable to URL Redirection to Untrusted Site. This issue was reported by @ready-research through huntr.dev.

Namespace: Svetlana-github
Repository: test
Repository Url: https://github.com/Svetlana-github/test
CxAST-Project: Svetlana-github/test
CxAST platform scan: 8821ba41-d324-41fa-8053-d13dfc156a43
Branch: main
Application: test
Severity: MEDIUM
State: NOT_IGNORED
Status: RECURRENT
CWE: CWE-601

---

Addition Info
Attack vector: NETWORK
Attack complexity: LOW
Confidentiality impact: NONE
Availability impact: NONE
Remediation Upgrade Recommendation: 1.5.9

---

References
Disclosure
Advisory
Issue
Issue
Pull request
Commit