| Package | Affected versions | Patched versions |
|---|---|---|
| forge | < 1.0.0 | 1.0.0 |
| node-forge | < 1.0.0 | 1.0.0 |
parseUrl functionality in node-forge mishandles certain uses of backslash such as https:/\/\/\ and interprets the URI as a relative path.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free