url-parse before 1.5.0 mishandles certain uses of backslash such as http:\/ and interprets the URI as a relative path.
mitre·NVD-CWE-noinfo·Published 2021-02-21