Related Vulnerabilities: CVE-2022-2217  

Cross-site Scripting (XSS) - Generic in GitHub repository ionicabizau/parse-url prior to 7.0.0.

Description

The MITRE CVE dictionary describes this issue as:

Cross-site Scripting (XSS) - Generic in GitHub repository ionicabizau/parse-url prior to 7.0.0.

Additional Information

  • Bugzilla 2102863: npm: XSS in parse-url
  • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
  • FAQ: Frequently asked questions about CVE-2022-2217