CVE-2021-3189

Name of the Vulnerable Software and Affected Versions: slashify version 1.0.0

Description: The issue allows open-redirect attacks. It is an Express middleware that normalises routes by stripping any final slash and redirects without validating the path. For example, visiting a URL like 'localhost:3000///github.com/' can redirect to 'https://github.com'.

Recommendations: For version 1.0.0, discontinuing use of the slashify package is recommended as there is no known safe version of this package.