Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2021-27516
7.5
HIGHCVSS v3
Published
February 22, 2021
CVSS v2
5 MEDIUM
Affected
3 projects
Assigned by
MITRE
Severity scale
010
Description
URI.js (aka urijs) before 1.19.6 mishandles certain uses of backslash such as http:\/ and interprets the URI as a relative path.
NPM
medialize/URI.js
GitHub
