-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 16 Dec 2025 16:00:11 +0530 Source: node-url-parse Built-For-Profiles: noudeb Architecture: source Version: 1.5.3-1+deb11u3 Distribution: bullseye-security Urgency: high Maintainer: Debian Javascript Maintainers <pkg-javascript-devel@lists.alioth.debian.org> Changed-By: Utkarsh Gupta <utkarsh@debian.org> Changes: node-url-parse (1.5.3-1+deb11u3) bullseye-security; urgency=high . * Non-maintainer upload by the LTS Security Team. * CVE-2022-0639: A specially crafted URL with empty userinfo and no host can be used to bypass authorization checks. Checksums-Sha1: 752827070e24f1d4bca1b228b0b5ab64b7c6d174 2612 node-url-parse_1.5.3-1+deb11u3.dsc fba49d90f834951cb000a674efee3d6f20968329 2028 node-url-parse_1.5.3.orig-types-url-parse.tar.gz caad3f7fa09e5c0b8ea099e1bd63b1e242bf891d 16789 node-url-parse_1.5.3.orig.tar.gz eede8368c70335c6190462b6be36f11751ede1ed 7324 node-url-parse_1.5.3-1+deb11u3.debian.tar.xz 3e36b1b33c6ee46402b071726d17540d4d2243c4 7633 node-url-parse_1.5.3-1+deb11u3_source.buildinfo Checksums-Sha256: 0a80f3c73c62c22c3b2cb436a0cc5ce147a8d58de2fceba2462accf1dcea156e 2612 node-url-parse_1.5.3-1+deb11u3.dsc aacd8bb80991adce84b6305b2f64d1644f16ac47376a0958954555517647b03e 2028 node-url-parse_1.5.3.orig-types-url-parse.tar.gz 1223358bf5f9cfcf0b1eb5619c1bb6083edb2cd92adba85b54235f6dac16aa08 16789 node-url-parse_1.5.3.orig.tar.gz 92e929e9dac3155a8587d8196465c29bec5fc89f457cf21d264ab922a1960662 7324 node-url-parse_1.5.3-1+deb11u3.debian.tar.xz 286c57bee0879dc8b6aba2e3a82aecefca4a49a3f2bd56cb72e50d43f97243b8 7633 node-url-parse_1.5.3-1+deb11u3_source.buildinfo Files: a211c1169dc056793fad837569b9a80d 2612 javascript optional node-url-parse_1.5.3-1+deb11u3.dsc 782204fc24278d978e12ef488becc87e 2028 javascript optional node-url-parse_1.5.3.orig-types-url-parse.tar.gz 79427f60fc27609ae7b090b18216132e 16789 javascript optional node-url-parse_1.5.3.orig.tar.gz 6dd32671554cff2ae8bdf2d52c80bf52 7324 javascript optional node-url-parse_1.5.3-1+deb11u3.debian.tar.xz 1d2166d58b373ed235164011a420c71b 7633 javascript optional node-url-parse_1.5.3-1+deb11u3_source.buildinfo -----BEGIN PGP SIGNATURE----- iQJHBAEBCgAxFiEEbJ0QSEqa5Mw4X3xxgj6WdgbDS5YFAmlBN+4THHV0a2Fyc2hA ZGViaWFuLm9yZwAKCRCCPpZ2BsNLlrB1D/9pSO218gex/EwP/4tsUu+sDilzWrGa +0hHTK+GvPUXYG3ROyQw2AY/iO2vQegukeKHe7br+F3UmaQsKzZuD5hDBYfRD9u5 R83a0ebU2DCb/oa8hYw+fRt8+F/jQM9oReKsjyD6qhYT3TbyUOidbFE5cwbbHRuM 9rdBu8IadfTe7F5slRvtuhM05YSMckYkPUhELAa2QEi50HqkliYrqZc8LKp+OJ8/ nKnV+TV/eMxV0YrLmqZvLuQuB5YVGi3P091sd9cyGxPOl3eFQe8GQAP4PpU7U3Qk PMN3XRzid9V1gkHr/9x2Lnvab0vTg3lRBcbbC5zeKtRQpdBR+hxXMyoXlg67qmPe hbK/6BaaMgxh2SsKkr9y+bPUQtafOruu6u1VfmmpSn+lhB4ALzNl3Gzg4csf0V2m YYBNhLguvdwx7ek8kZ/rElL1NhD4q+BjiUubKD5/7S+z3M2iY/a8xBz5r9RWOJ3B xd4PzQUX0OmE9G2+sTP92J+bY3uRQheDCSMg4invK9uBaxx0U4LdV8yvXS/HCNMa Mw1PTTsSgO5yuew2y/Q7UnserYtgejGEYF6jKHT49/QcMjnG75AeeOhlkM/5NUWD h4WuKohSTcULg4u4fkp8MxBkTOJX1J9KJ9wp/63EkJSVxUGEp5Pv2hl/GaBI/acc yaR0B4JAliqIkA== =4+0t -----END PGP SIGNATURE-----