CVE-2021-27515

CVE-2021-27515 describes a vulnerability in url-parse versions prior to 1.5.0, where the library incorrectly parses URIs containing backslashes (e.g., "http:\/") as relative paths, affecting the url-parse_project url-parse product. This medium-severity vulnerability (CVSS 5.3) is network-exploitable with low attack complexity, potentially leading to information integrity issues without requiring user interaction or elevated privileges. While the vulnerability has a low EPSS score and no known active exploitation, public exploit code, or significant community discussion, organizations using affected versions should update to mitigate potential risks.