Debian 11: DLA-4413-1 node-url-parse Critical Authorization Bypass Fix
It was found that in node-url-parse, a Node.js module used to parse URLs, an incorrect conversion of `@` characters in protocol in the `href` field can lead to lead to failure to properly identify the hostname, which in turn could result in authorization bypass. For Debian 11 bullseye, this problem has been fixed in versionLinuxSecurity – Security AdvisoriesRead More