OSV - Open Source Vulnerabilities

MAL-2026-10108

npm/url-func-registry

Malicious code in url-func-registry (npm)

9 hours ago

No fix available

PYSEC-2026-1404

PyPI/git-url-parse

git-url-parse Regular Expression Denial of Service

2 days ago

No fix available
Severity - 7.5 (High)

MAL-2026-6139

npm/@httpactions/encode-url

Malicious code in @httpactions/encode-url (npm)

18 Jun

No fix available

MAL-2026-5574

npm/spotify-url-resolver

Malicious code in spotify-url-resolver (npm)

11 Jun

No fix available

MAL-2026-4142

npm/jest-url-loader

Malicious code in jest-url-loader (npm)

19 May

No fix available

GHSA-h7xc-4mv8-59fj

PyPI/mcp-url-downloader

mcp-url-downloader has a Server-Side Request Forgery issue

27 Apr

No fix available
Severity - 5.5 (Medium)

MAL-2026-2701

npm/sanitize-url

Malicious code in sanitize-url (npm)

16 Apr

No fix available

GHSA-8fgx-wgvr-pcx8

npm/js-video-url-parser

Zod jsVideoUrlParser vulnerable to ReDoS in util.js

10 Apr

No fix available
Severity - 5.5 (Medium)

MAL-2026-1260

npm/webmd-url

Malicious code in webmd-url (npm)

06 Mar

No fix available

MAL-2026-56

npm/@crepo/crepo-url-query-mapper

Malicious code in @crepo/crepo-url-query-mapper (npm)

05 Jan

No fix available

DLA-4413-1

Debian:11/node-url-parse

node-url-parse - security update

16 Dec 2025

Fix available

MAL-2025-190940

npm/url-encode-decode

Malicious code in url-encode-decode (npm)

24 Nov 2025

No fix available

MAL-2025-190897

npm/@posthog/url-normalizer-plugin

Malicious code in @posthog/url-normalizer-plugin (npm)

24 Nov 2025

No fix available

MAL-2025-49155

npm/epic-gtm-url-checker

Malicious code in epic-gtm-url-checker (npm)

30 Oct 2025

No fix available

MAL-2025-47310

npm/ember-url-hash-polyfill

Malicious code in ember-url-hash-polyfill (npm)

16 Sep 2025

No fix available

MAL-2025-41252

npm/@navify-platform/url

Malicious code in @navify-platform/url (npm)

20 Aug 2025

No fix available