CVE-2022-2900: 
JavaScript vulnerability analysis and mitigation

Server-Side Request Forgery (SSRF) vulnerability was identified in the GitHub repository ionicabizau/parse-url versions prior to 8.1.0. The vulnerability was assigned CVE-2022-2900 and was disclosed on September 14, 2022. The vulnerability received a CVSS v3.1 base score of 9.1 (CRITICAL) (NVD).

The vulnerability is classified as CWE-918 (Server-Side Request Forgery). It has a CVSS v3.1 vector string of CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N, indicating that it is network-accessible, requires low attack complexity, needs no privileges or user interaction, and can result in high impacts to confidentiality and integrity (NVD).

The vulnerability allows attackers to potentially achieve high levels of impact on both confidentiality and integrity of the affected system, though availability is not impacted. The CRITICAL severity rating (9.1) indicates significant potential for harm if exploited (NVD).

The vulnerability was patched in version 8.1.0 of the parse-url package. The fix includes implementing input validation and adding a length limit to prevent invalid URLs from being processed (GitHub Patch).