CVE-2022-3224: Misinterpretation of Input

September 15, 2022 (updated September 17, 2022)

Misinterpretation of Input in GitHub repository ionicabizau/parse-url prior to 8.1.0.

References

github.com/ionicabizau/parse-url/commit/9cacf38de02db0fb1358bd6ec04543e523cd6a8e
huntr.dev/bounties/3587a567-7fcd-4702-b7c9-d9ca565e3c62
nvd.nist.gov/vuln/detail/CVE-2022-3224

Code Behaviors & Features

Detect and mitigate CVE-2022-3224 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →