Severity: Critical
CVSS Score: 6.5
Authorization Bypass Through User-Controlled Key in NPM url-parse prior to 1.5.9.