CVE-2022-1243: Uri.js Project Uri.js

Medium severity, CVSS 6.1. EPSS: 0.7% chance of exploitation in the next 30 days.

CRHTLF can lead to invalid protocol extraction potentially leading to XSS in GitHub repository medialize/uri.js prior to 1.19.11.

Affected products

• Uri.js Project Uri.js: before 1.19.11 (fixed in 1.19.11)

Published 2022-04-05. Last modified 2026-06-17.