CVE-2022-0686

CVE-2022-0686 is a critical authorization bypass vulnerability (CVSS 9.1) affecting NPM's url-parse library prior to version 1.5.8. This flaw allows an attacker to bypass authentication mechanisms by manipulating user-controlled keys, potentially leading to full compromise of confidentiality and integrity. While no public exploits, Metasploit modules, or Nuclei templates are currently available, and there is no evidence of active exploitation or significant community discussion, the high CVSS score and FAUCET Risk Score of 72/100 indicate a serious potential threat.