36kr.com 45 packages

Last scanned on Oct 27 at 06:23 PM
url-parse 1.4.5 - 1.4.7VulnerableOutdated
Small footprint URL parser that works seamlessly across Node.js and browser environments
License
MIT
Footprint
3 KB
Vulnerabilities
url-parse incorrectly parses hostname / protocol due to unstripped leading control characters.
Affected versions >=0 <1.5.9
Authorization bypass in url-parse
Affected versions >=0 <1.5.6
Path traversal in url-parse
Affected versions >=0 <1.5.0
Open redirect in url-parse
Affected versions >=0 <1.5.2
Authorization Bypass Through User-Controlled Key in url-parse
Affected versions >=0 <1.5.8
url-parse Incorrectly parses URLs that include an '@'
Affected versions >=0 <1.5.7
Matched Modules
Version distribution in production
206
1.5.10
167
1.5.9
50
1.5.3
47
1.4.6
47
1.4.7
24
1.5.4
crypto-js 4.1.0 - 4.1.1VulnerableOutdated
JavaScript library of crypto standards.
es5-ext 0.10.24 - 0.10.49VulnerableOutdated
ECMAScript extensions and shims
tslib 1.2.0 - 2.4.0Outdated
Runtime library for TypeScript helper functions
isarray 0.0.0 - 2.0.5
Array#isArray for older browsers
react-is 16.3.0 - 16.13.1Outdated
Brand checking of React Elements.
form-data 1.0.0 - 4.0.0
A library to create readable "multipart/form-data" streams. Can be used to submit forms and file uploads to other web applications.
+2
mikeal
niftylettuce
alexindigo
buffer 4.6.0 - 4.9.2Outdated
Node.js Buffer API, for the browser
entities 2.0.3 - 2.1.0Outdated
Encode & decode XML and HTML entities with ease & speed
path-to-regexp 1.7.0 - 1.8.0Outdated
Express style path to RegExp utility
domutils 2.8.0Outdated
Utilities for working with htmlparser2's dom
parse5 6.0.0 - 6.0.1Outdated
HTML parser and serializer.
base64-js 1.3.0 - 1.5.1
Base64 encoding/decoding in pure JS
dom-serializer 1.0.0 - 1.4.1Outdated
render domhandler DOM nodes to a string
domhandler 4.2.2 - 4.3.1Outdated
Handler for htmlparser2 that turns pages into a dom
domelementtype 2.0.0 - 2.1.0Outdated
all the types of nodes in htmlparser2's dom
core-js 2.6.11Outdated
Standard library
css-select 4.2.0 - 4.2.1Outdated
a CSS selector compiler/engine
htmlparser2 6.1.0Outdated
Fast & forgiving HTML/XML parser
css-what 5.0.0 - 5.1.0Outdated
a CSS selector parser
feedic
feedic
nth-check 2.0.1Outdated
Parses and compiles CSS nth-checks to highly optimized functions.
requires-port 1.0.0
Check if a protocol requires a certain port number to be added to an URL.
scheduler 0.15.0 - 0.23.0Outdated
Cooperative scheduler for the browser environment.
prop-types 15.7.0 - 15.7.2Outdated
Runtime type checking for React props and similar objects.
react 16.13.0 - 17.0.2Outdated
React is a JavaScript library for building user interfaces.
react-dom 16.13.0 - 16.14.0Outdated
React package for working with the DOM.
querystringify 2.2.0
Querystringify - Small, simple but powerful query string parser.
boolbase 1.0.0
two functions: One that returns true, one that returns false
feedic
feedic
hoist-non-react-statics 2.5.1 - 3.3.2
Copies non-react specific statics from a child component to a parent component
mridgway
mridgway
whatwg-fetch 3.0.0 - 3.1.1Outdated
A window.fetch polyfill.
jakechampion
mattandrews
mislav
object.getownpropertydescriptors 2.0.0 - 2.1.4Outdated
ES2017 spec-compliant shim for `Object.getOwnPropertyDescriptors` that works in ES5.
react-router 4.3.0 - 4.3.1Outdated
Declarative routing for React
redux 4.0.5Outdated
Predictable state container for JavaScript apps
react-fast-compare 2.0.4Outdated
Fastest deep equal comparison for React. Great for React.memo & shouldComponentUpdate. Also really fast general-purpose deep comparison.
parse5-htmlparser2-tree-adapter 5.0.0 - 6.0.1Outdated
htmlparser2 tree adapter for parse5.
cheerio 0.22.0Outdated
Tiny, fast, and elegant implementation of core jQuery designed specifically for the server
react-redux 5.1.0 - 5.1.2Outdated
Official React bindings for Redux
shallowequal 1.0.1 - 1.1.0
Like lodash isEqualWith but for shallow equal.
history 4.6.3 - 4.10.1Outdated
Manage session history with JavaScript
fp-ts 0.2.1 - 0.2.9Outdated
Functional programming in TypeScript
react-side-effect 1.2.0Outdated
Create components whose prop changes map to a global side effect
react-helmet 5.2.0 - 5.2.1Outdated
A document head manager for React
antd 3.26.14 - 4.4.1Outdated
An enterprise-class UI design language and React components implementation
wretch 1.5.0 - 1.7.10Outdated
A tiny wrapper built around fetch with an intuitive syntax.
lottie-api 1.0.0 - 1.0.2Outdated
A library to edit lottie-web animations dynamically
airnan
airnan