Approved changes feed: RSS · Atom

cpe:2.3:o:url-parse_project:url-parse:*:*:*:*:*:*:*:*

part: o version: * update: *

VendorUrl Parse Project (440532e9-2162-5dd2-b5f6-bc535f1ced52)
ProductUrl Parse (f116b1f2-7d75-5f2a-9a32-da10e7f298c1)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/node-url-parse purl2cpe 2026-06-01 10:17:49.548741
pkg:deb/ubuntu/node-url-parse purl2cpe 2026-06-01 10:17:49.548744
pkg:github/unshiftio/url-parse purl2cpe 2026-06-01 10:17:49.548747
pkg:maven/org.webjars.bowergithub.unshiftio/url-parse purl2cpe 2026-06-01 10:17:49.548750
pkg:maven/org.webjars.npm/url-parse purl2cpe 2026-06-01 10:17:49.548753
pkg:npm/url-parse purl2cpe 2026-06-01 10:17:49.548756

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-3774 vulnerable 2026-06-08 05:11:41.270158 Details available
Incorrect parsing in url-parse <1.4.3 returns wrong hostname which leads to multiple vulnerabilities such as SSRF, Open Redirect, Bypass Authentication Protocol.
Published: 2018-08-12T22:00:00.000Z
Updated: 2024-08-05T04:50:30.463Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.