Approved changes feed: RSS · Atom
cpe:2.3:a:uri.js_project:uri.js:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Uri.Js Project (bb3f79e1-2216-5173-a621-366f7113a192) |
|---|---|
| Product | Uri.Js (07816d9c-3452-5adf-9098-60fc8a4b710d) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/medialize/uri.js |
purl2cpe | 2026-06-01 10:15:28.837360 |
pkg:maven/org.webjars.bowergithub.medialize/uri.js |
purl2cpe | 2026-06-01 10:15:28.837362 |
pkg:sourceforge/uri-js.mirror |
purl2cpe | 2026-06-01 10:15:28.837365 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2022-24723 |
vulnerable | 2026-06-08 05:41:01.438257 |
Improper Input Validation in URI.js
MEDIUM (5.3)
URI.js is a Javascript URL mutation library. Before version 1.19.9, whitespace characters are not removed from the beginning of the protocol, so URLs are not parsed properly. This issue has been patched in version 1.19.9. Removing leading whitespace from values before passing them to URI.parse can be used as a workaround.
Published: 2022-03-03T20:35:11.000Z
Updated: 2025-04-22T18:20:48.760Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-1243 |
vulnerable | 2026-06-08 05:39:12.481317 |
CRHTLF can lead to invalid protocol extraction potentially leading to XSS in medialize/uri.js
HIGH (7.2)
CRHTLF can lead to invalid protocol extraction potentially leading to XSS in GitHub repository medialize/uri.js prior to 1.19.11.
Published: 2022-04-05T15:05:18.000Z
Updated: 2024-08-02T23:55:24.671Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-1233 |
vulnerable | 2026-06-08 05:39:12.466320 |
URL Confusion When Scheme Not Supplied in medialize/uri.js
MEDIUM (6.5)
URL Confusion When Scheme Not Supplied in GitHub repository medialize/uri.js prior to 1.19.11.
Published: 2022-04-04T19:30:15.000Z
Updated: 2024-08-02T23:55:24.574Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-0868 |
vulnerable | 2026-06-08 05:39:11.385960 |
Open Redirect in medialize/uri.js
HIGH (8)
Open Redirect in GitHub repository medialize/uri.js prior to 1.19.10.
Published: 2022-03-06T15:20:09.000Z
Updated: 2024-08-02T23:40:04.559Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-0613 |
vulnerable | 2026-06-08 05:39:10.377302 |
Authorization Bypass Through User-Controlled Key in medialize/uri.js
MEDIUM (5.3)
Authorization Bypass Through User-Controlled Key in NPM urijs prior to 1.19.8.
Published: 2022-02-16T08:40:09.000Z
Updated: 2024-08-02T23:32:46.462Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-3647 |
vulnerable | 2026-06-08 05:33:53.282841 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-27516 |
vulnerable | 2026-06-08 05:31:21.737165 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-26291 |
vulnerable | 2026-06-08 05:23:51.148710 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.