← All advisories

Moderate severityNVD Advisory· Published Feb 17, 2022· Updated Dec 16, 2025

Authorization Bypass Through User-Controlled Key in unshiftio/url-parse

CVE-2022-0639

Description

Authorization Bypass Through User-Controlled Key in NPM url-parse prior to 1.5.7.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
url-parsenpm	>= 1.0.0, < 1.5.7	1.5.7

Affected products

2

ghsa-coords
pkg:npm/url-parse
Range: >= 1.0.0, < 1.5.7
unshiftio/unshiftio/url-parsev5
Range: unspecified

Patches

Vulnerability mechanics

References

6

github.com/advisories/GHSA-8v38-pw62-9cw2ghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2022-0639ghsaADVISORY
github.com/unshiftio/url-parse/commit/ef45a1355375a8244063793a19059b4f62fc8788ghsaWEB
huntr.dev/bounties/83a6bc9a-b542-4a38-82cd-d995a1481155ghsaWEB
lists.debian.org/debian-lts-announce/2023/02/msg00030.htmlghsamailing-listWEB
lists.debian.org/debian-lts-announce/2025/12/msg00024.htmlghsaWEB

News mentions

0

No linked articles in our index yet.