EPSS
Percentile
41.8%
Insufficient validation and sanitization of user input exists in url-parse npm package version 1.4.4 and earlier may allow attacker to bypass security checks.
hackerone.com/reports/496293
nvd.nist.gov/vuln/detail/CVE-2020-8124