url-parse incorrectly parses hostname / protocol due to unstripped leading control characters.
Moderate severity
GitHub Reviewed
Published
Feb 22, 2022
to the GitHub Advisory Database
•
Updated Feb 3, 2026
Give feedback on Dependabot alerts