https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T20:34:15.386119+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-11593 EUVD-2026-11593 2026-10-02T20:34:15.454458+00:00 EUVD-2026-11593 https://cve.radiocsirt.org/vuln/fkie_cve-2022-1233 fkie_cve-2022-1233 2026-10-02T20:34:15.454518+00:00

URL Confusion When Scheme Not Supplied in GitHub repository medialize/uri.js prior to 1.19.11.

 https://cve.radiocsirt.org/vuln/ghsa-g694-m8vq-gv9h GHSA-g694-m8vq-gv9h — URL Confusion When Scheme Not Supplied in medialize/uri.js 2026-10-02T20:34:15.454554+00:00

Affected: npm: urijs

Medialize is a Javascript URL mutation library. When parsing a URL without a scheme and with excessive slashes, like ///www.example.com, URI.js will parse the hostname as null and the path as /www.example.com. Such behaviour is different from that exhibited by browsers, which will parse ///www.example.com as http://www.example.com instead. For example, the following will cause a redirect to http://www.example.com: A fix was released in version 1.19.11.

 https://cve.radiocsirt.org/vuln/gsd-2022-1233 gsd-2022-1233 2026-10-02T20:34:15.454582+00:00 gsd-2022-1233