description: Insufficient validation and sanitization of user input exists in url-parse npm package version 1.4.4 and earlier may allow attacker to bypass security checks.
problem types: Improper Input Validation (CWE-20)
affected:
{
product: url-parse
vendor: n/a
versions:
status: affected, version: Fixed Version 1.4.5
}