CVE-2021-27515: Url-Parse Project Url-Parse

Medium severity, CVSS 5.3. EPSS: 2% chance of exploitation in the next 30 days.

url-parse before 1.5.0 mishandles certain uses of backslash such as http:\/ and interprets the URI as a relative path.

Affected products

• Url-Parse Project Url-Parse: before 1.5.0 (fixed in 1.5.0)

Published 2021-02-22. Last modified 2026-06-17.