uri-js (npm)

An RFC 3986 compliant, scheme extendable URI parsing/validating/normalizing/resolving library for JavaScript

Advisories

Latest version

4.4.1

Released Jan 10, 2021

License

BSD-2-Clause

OpenSSF Scorecard

2.4 / 10

How to fix

Upgrading to 3.0.0 or later clears every advisory below that has a fix.

Upgrade commands

npm

npm install uri-js@4.4.1

yarn

yarn add uri-js@4.4.1

pnpm

pnpm add uri-js@4.4.1

Known vulnerabilities

Advisory	Severity	Affected	Fixed in
GHSA-333w-rxj3-f55r Regular Expression Denial Of Service in uri-js	Medium EPSS 1.32%	`< 3.0.0`	`3.0.0`

Source: git+ssh://git@github.com/garycourt/uri-js.git

Is this in your code?

MergeHarbor checks every repository's dependencies against this database, ranks what matters by exploitability and reachability, routes it to the owning team and opens the fix pull request.

Check your repos with MergeHarbor