CVE-2022-0613: Fedoraproject Fedora

Medium severity, CVSS 6.5. EPSS: 1.5% chance of exploitation in the next 30 days.

Authorization Bypass Through User-Controlled Key in NPM urijs prior to 1.19.8.

Affected products

• Fedoraproject Fedora: version 35 only
• Uri.js Project Uri.js: before 1.19.8 (fixed in 1.19.8)

Published 2022-02-16. Last modified 2026-06-17.