PatchTheCVE: url-parsehttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2022-0691: Authorization Bypass Through User-Controlled Key in NPM url-parse prior to 1.5.9.https://patchthecve.com/cve/CVE-2022-0691.htmlhttps://patchthecve.com/cve/CVE-2022-0691.htmlWed, 17 Jun 2026 04:21:04 +0000CRITICAL 9.8: Authorization Bypass Through User-Controlled Key in NPM url-parse prior to 1.5.9.CVE-2022-0686: Authorization Bypass Through User-Controlled Key in NPM url-parse prior to 1.5.8.https://patchthecve.com/cve/CVE-2022-0686.htmlhttps://patchthecve.com/cve/CVE-2022-0686.htmlWed, 17 Jun 2026 04:21:03 +0000CRITICAL 9.1: Authorization Bypass Through User-Controlled Key in NPM url-parse prior to 1.5.8.CVE-2022-0639: Authorization Bypass Through User-Controlled Key in NPM url-parse prior to 1.5.7.https://patchthecve.com/cve/CVE-2022-0639.htmlhttps://patchthecve.com/cve/CVE-2022-0639.htmlWed, 17 Jun 2026 04:20:59 +0000MEDIUM 5.3: Authorization Bypass Through User-Controlled Key in NPM url-parse prior to 1.5.7.CVE-2022-0512: Authorization Bypass Through User-Controlled Key in NPM url-parse prior to 1.5.6.https://patchthecve.com/cve/CVE-2022-0512.htmlhttps://patchthecve.com/cve/CVE-2022-0512.htmlWed, 17 Jun 2026 04:20:45 +0000MEDIUM 5.3: Authorization Bypass Through User-Controlled Key in NPM url-parse prior to 1.5.6.CVE-2021-3664: url-parse is vulnerable to URL Redirection to Untrusted Sitehttps://patchthecve.com/cve/CVE-2021-3664.htmlhttps://patchthecve.com/cve/CVE-2021-3664.htmlWed, 17 Jun 2026 04:05:31 +0000MEDIUM 5.3: url-parse is vulnerable to URL Redirection to Untrusted SiteCVE-2021-27515: url-parse before 1.5.0 mishandles certain uses of backslash such as http:\/ and interprets the URI as a relatihttps://patchthecve.com/cve/CVE-2021-27515.htmlhttps://patchthecve.com/cve/CVE-2021-27515.htmlWed, 17 Jun 2026 03:45:00 +0000MEDIUM 5.3: url-parse before 1.5.0 mishandles certain uses of backslash such as http:\/ and interprets the URI as a relative path.