sindresorhus/normalize-url

sindresorhus/normalize-url

GitHubGitHub
GitHubgithub.com
Releases55
Frequency2 months 2 weeks
Last Release
Stars877
Normalize a URL
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2021-33502↗
7.5 HIGH5 MEDIUM

The normalize-url package before 4.5.1, 5.x before 5.3.1, and 6.x before 6.0.1 for Node.js has a ReDoS (regular expression denial of service) issue because it has exponential performance for data: URLs.