CVE-2020-8124: Url-Parse Project Url-Parse

Medium severity, CVSS 5.3. EPSS: 1.7% chance of exploitation in the next 30 days.

Insufficient validation and sanitization of user input exists in url-parse npm package version 1.4.4 and earlier may allow attacker to bypass security checks.

Affected products

• Url-Parse Project Url-Parse: up to and including 1.4.4

Published 2020-02-04. Last modified 2026-06-17.