uri-js@2.1.1 vulnerabilities
An RFC 3986/3987 compliant, scheme extendable URI/IRI parsing/validating/resolving library for JavaScript.
-
latest version
4.4.1
-
latest non vulnerable version
-
first published
12 years ago
-
latest version published
3 years ago
-
licenses detected
- >=2.0.0
Direct Vulnerabilities
Known vulnerabilities in the uri-js package. This does not include vulnerabilities belonging to this package’s dependencies.
Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.Vulnerability | Vulnerable Version |
---|---|
Affected versions of this package are vulnerable to Regular Expression Denial of Service (ReDoS) attacks when validating URLs. How to fix Regular Expression Denial of Service (ReDoS)? Upgrade |
<3.0.0
|
Affected versions of this package are vulnerable to Regular Expression Denial of Service (ReDoS) attacks when validating URLs. How to fix Regular Expression Denial of Service (ReDoS)? Upgrade |
<3.0.0
|