normalize-url@5.3.0 vulnerabilities

Direct Vulnerabilities

Known vulnerabilities in the normalize-url package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.
Fix for free
Vulnerability Vulnerable Version
  • H
Regular Expression Denial of Service (ReDoS)

normalize-url is a Normalize a URL

Affected versions of this package are vulnerable to Regular Expression Denial of Service (ReDoS) due to exponential performance in data URLs.

How to fix Regular Expression Denial of Service (ReDoS)?

Upgrade normalize-url to version 6.0.1, 5.3.1, 4.5.1 or higher.

>=6.0.0 <6.0.1 >=5.0.0 <5.3.1 >=4.4.0 <4.5.1