← All advisories

Medium severity5.3NVD Advisory· Published Feb 14, 2022· Updated Jun 17, 2026

CVE-2022-0512

CVE-2022-0512

Description

Authorization Bypass Through User-Controlled Key in NPM url-parse prior to 1.5.6.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
url-parsenpm	>= 0.1.0, < 1.5.6	1.5.6

Affected products

3

URL Parse Project/URL Parse
cpe:2.3:a:url-parse_project:url-parse:*:*:*:*:*:node.js:*:*
Range: <1.5.6
ghsa-coords
pkg:npm/url-parse
Range: >= 0.1.0, < 1.5.6
unshiftio/unshiftio/url-parsev5
Range: unspecified

Patches

Vulnerability mechanics

References

5

github.com/unshiftio/url-parse/commit/9be7ee88afd2bb04e4d5a1a8da9a389ac13f8c40nvdPatchThird Party AdvisoryWEB
huntr.dev/bounties/6d1bc51f-1876-4f5b-a2c2-734e09e8e05bnvdExploitPatchThird Party AdvisoryWEB
github.com/advisories/GHSA-rqff-837h-mm52ghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2022-0512ghsaADVISORY
lists.debian.org/debian-lts-announce/2023/02/msg00030.htmlnvdWEB

News mentions

0

No linked articles in our index yet.