漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
Improper Input Validation
Vulnerability Description
The package url-js before 2.1.0 are vulnerable to Improper Input Validation due to improper parsing, which makes it is possible for the hostname to be spoofed. http://\\\\\\\\localhost and http://localhost are the same URL. However, the hostname is not parsed as localhost, and the backslash is reflected as it is.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Vulnerability Type
N/A
Vulnerability Title
URL.js 输入验证错误漏洞
Vulnerability Description
URL.js是用于解析和格式化 URL。 URL.js 中存在安全漏洞，该漏洞由于解析不当，容易受到 Improper Input Validation 的影响，这使得主机名有可能被欺骗。
CVSS Information
N/A
Vulnerability Type
N/A