← All advisories

Medium severity5.3NVD Advisory· Published Feb 17, 2022· Updated Jun 17, 2026

CVE-2022-0639

CVE-2022-0639

Description

Authorization Bypass Through User-Controlled Key in NPM url-parse prior to 1.5.7.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
url-parsenpm	>= 1.0.0, < 1.5.7	1.5.7

Affected products

3

URL Parse Project/URL Parse
cpe:2.3:a:url-parse_project:url-parse:*:*:*:*:*:node.js:*:*
Range: <1.5.7
ghsa-coords
pkg:npm/url-parse
Range: >= 1.0.0, < 1.5.7
unshiftio/unshiftio/url-parsev5
Range: unspecified

Patches

Vulnerability mechanics

References

6

github.com/unshiftio/url-parse/commit/ef45a1355375a8244063793a19059b4f62fc8788nvdPatchThird Party AdvisoryWEB
huntr.dev/bounties/83a6bc9a-b542-4a38-82cd-d995a1481155nvdExploitIssue TrackingPatchThird Party AdvisoryWEB
github.com/advisories/GHSA-8v38-pw62-9cw2ghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2022-0639ghsaADVISORY
lists.debian.org/debian-lts-announce/2023/02/msg00030.htmlnvdWEB
lists.debian.org/debian-lts-announce/2025/12/msg00024.htmlnvdWEB

News mentions

0

No linked articles in our index yet.