url-parse

url-parse Incorrectly parses URLs that include an '@'

Path traversal in url-parse

Open redirect in url-parse

Open Redirect in url-parse

Improper Validation and Sanitization in url-parse

url-parse incorrectly parses hostname / protocol due to unstripped leading control characters.

Authorization Bypass Through User-Controlled Key in url-parse

Authorization bypass in url-parse

Malicious code in url-parser-native (npm)