{"id":113646,"date":"2024-02-16T22:02:41","date_gmt":"2024-02-16T20:02:41","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/uyazvimosti-v-node-js-i-libuv"},"modified":"2024-02-16T22:02:41","modified_gmt":"2024-02-16T20:02:41","slug":"uyazvimosti-v-node-js-i-libuv","status":"publish","type":"post","link":"https:\/\/prohoster.info\/lv\/blog\/news\/uyazvimosti-v-node-js-i-libuv","title":{"rendered":"Vulnerabilities in Node.js and libuv","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Pieejamas labojumu versijas servera JavaScript platformai Node.js 21.6.2, 20.11.1, 18.19.1, kur\u0101s ir labotas 8 ievainojam\u012bbas, no kur\u0101m 4 ir ar augstu b\u012bstam\u012bbas pak\u0101pi:    <\/p>\n<ul>\n<li class=\"l\"> CVE-2024-21892 \u2014 iesp\u0113ja, ka nepilnvarots lietot\u0101js var izpild\u012bt kodu, kas mantis papla\u0161in\u0101tas privil\u0113\u0123ijas, ar kur\u0101m tiek veikta darba pl\u016bsma. Ievainojam\u012bba tika izrais\u012bta ar k\u013c\u016bdu iz\u0146\u0113muma realiz\u0101cij\u0101, kas \u013cauj proces\u0101 ar papla\u0161in\u0101t\u0101m privil\u0113\u0123ij\u0101m apstr\u0101d\u0101t vidi main\u012bg\u0101s, kuras nor\u0101d\u012bjis nepilnvarots lietot\u0101js. Iz\u0146\u0113mums b\u016btu j\u0101sniedz tikai CAP_NET_BIND_SERVICE privil\u0113\u0123ij\u0101m, ta\u010du k\u013c\u016bdas d\u0113\u013c tas tika piem\u0113rots ar\u012b da\u017e\u0101m cit\u0101m privil\u0113\u0123ij\u0101m.\n<li class=\"l\"> CVE-2024-22019 \u2014 pakalpojuma atteikums, izsmejot pieejamos resursus (procesora slodze un joslas platuma pat\u0113ri\u0146\u0161) ieb\u016bv\u0113t\u0101 HTTP servera apstr\u0101d\u0113, sa\u0146emot \u012bpa\u0161i noform\u0113tus chunked piepras\u012bjumus, kas rada neierobe\u017eotu byte las\u012b\u0161anu vien\u0101 savienojum\u0101.\n<li class=\"l\"> CVE-2024-21896 \u2014 b\u0101zes kataloga robe\u017eu p\u0101rsnieg\u0161ana failu ce\u013cos. Ievainojam\u012bba \u013cauj apiet faila ce\u013cu normaliz\u0101ciju, izmantojot path.resolve() gad\u012bjum\u0101, ja ce\u013c\u0161 tiek nos\u016bt\u012bts, izmantojot Buffer klasi. Lai ieg\u016btu l\u012bdz\u012bgu ce\u013cu p\u0113c p\u0101rbaudes, tiek izsaukts Buffer.from() metode, ta\u010du lietotn\u0113 var tikt izmantots Buffer.prototype.utf8Write izsaukums, kas noved pie satura aizvieto\u0161anas p\u0113c path.resolve() izpildes, radot ievainojam\u012bbu.\n<li class=\"l\"> CVE-2024-22017 \u2014 setuid() izsaukums nenosl\u0113dz visas privil\u0113\u0123ijas. Proti, setuid() neietekm\u0113 io_uring oper\u0101cijas, kas tiek izmantotas libuv, ja t\u0101s tika inicializ\u0113tas pirms setuid() izsaukuma.\n<li class=\"l\"> CVE-2023-46809 \u2014 ievainojam\u012bba privateDecrypt() API, \u013caujot izmantot Marvin uzbrukumu RSA dekripcijai, pamatojoties uz izpildes laika m\u0113r\u012bjumiem.\n<li class=\"l\"> CVE-2024-21891 \u2014 iesp\u0113ja apiet piek\u013cuves ties\u012bbu modeli, izmantojot piel\u0101gotus failu ce\u013cu normaliz\u0101cijas apstr\u0101d\u0101t\u0101jus.\n<li class=\"l\"> CVE-2024-21890 \u2014 nepareiza masku apstr\u0101de parametros \u2018\u2014allow-fs-read\u2019 un \u2018\u2014allow-fs-write\u2019. Piem\u0113ram, \u2018\u2014allow-fs-read=\/home\/node\/.ssh\/*.pub\u2019 rad\u012bs piek\u013cuvi visam saturam \u2018.ssh\/\u2019, nevis tikai failiem ar papla\u0161in\u0101jumu \u2018.pub\u2019, jo maska \u2018*\u2019 tiek apstr\u0101d\u0101ta k\u0101 p\u0113d\u0113jais ce\u013ca elements.\n<li class=\"l\"> CVE-2024-22025 \u2014 pakalpojumu atteik\u0161ana, izt\u0113r\u0113jot resursus, dekod\u0113jot saska\u0146ot\u0101 Brotli form\u0101ta saspiestos datus, kas ieg\u016bti, izmantojot fetch().          <\/ul>\n<p>Papildus var min\u0113t libuv 1.48.0 bibliot\u0113kas izdo\u0161anu, kas tiek izmantota Node.js savienojumu muliplex\u0113\u0161anai un asinkr\u0101s ievades\/izvades apstr\u0101dei. Bez Node.js bibliot\u0113ka tiek izmantota ar\u012b DNS serveros BIND 9 un Knot DNS, HTTP server\u012b H2O, Lua ietvar\u0101 Luvit.  <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/lv\/vps\/abuzoustojchivye-vps\/\"   title=\"virtu\u0101l\u0101 ma\u0161\u012bn\u0101\" data-wpil-keyword-link=\"linked\"  data-wpil-monitor-id=\"4302\">virtu\u0101l\u0101 ma\u0161\u012bn\u0101<\/a> MoarVM, Julia valod\u0101 un Python ietvar\u0101 uvloop. Jaunaj\u0101 versij\u0101 ir nov\u0113rsta ievainojam\u012bba (CVE-2024-24806), kas izpau\u017eas projektos, kas izmanto libuv, un \u013cauj veikt SSRF (Server-side request forgery) uzbrukumu, lai piek\u013c\u016btu iek\u0161\u0113jam API. Ievainojam\u012bba rad\u0101s, jo funkcija uv_getaddrinfo() samazin\u0101ja hosta nosaukumu l\u012bdz 256 simboliem pirms dom\u0113na iz\u0161\u0137ir\u0161anas, izmantojot funkciju getaddrinfo(), kas var novest pie nepareiza nosaukuma noteik\u0161anas. <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/lv\/lir\/ipv4\/\"   title=\"IP adreses\" data-wpil-keyword-link=\"linked\"  data-wpil-monitor-id=\"665\">IP adreses<\/a> un p\u0101rbaudes apiet. Piem\u0113ram, MySpace veida pakalpojumi, kas izveido apak\u0161dom\u0113nus form\u0101t\u0101 \u201eusername.example.com\u201d, var tikt uzbrukti, nor\u0101dot garu lietot\u0101jv\u0101rdu.      <\/p>\n<p>T\u0101pat ir izn\u0101cis atjaunin\u0101jums Node.js izmantotajam HTTP klientam undici 5.28.3, kur\u0101 ir nov\u0113rsta ievainojam\u012bba (CVE-2024-24758), ko izrais\u012bja Proxy-Authorization HTTP galvenes nesakop\u0161ana pie piepras\u012bjumu p\u0101radres\u0101cijas.<br \/>\n<br \/>Avots: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=60612\">opennet.lv<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0414\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u0432\u044b\u043f\u0443\u0441\u043a\u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u043d\u043e\u0439 JavaScript-\u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b Node.js 21.6.2, 20.11.1, 18.19.1, \u0432 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043e 8 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 4 \u043f\u0440\u0438\u0441\u0432\u043e\u0435\u043d \u0432\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438: CVE-2024-21892 &#8212; \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043f\u043e\u0434\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u043d\u0435\u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c \u043a\u043e\u0434\u0430, \u043d\u0430\u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u0433\u043e \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u043d\u044b\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438, \u0441 \u043a\u043e\u0442\u043e\u0440\u044b\u043c\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u0442\u0441\u044f \u0440\u0430\u0431\u043e\u0447\u0438\u0439 \u043f\u0440\u043e\u0446\u0435\u0441\u0441. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u044b\u0437\u0432\u0430\u043d\u0430 \u043e\u0448\u0438\u0431\u043a\u043e\u0439 \u0432 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0438\u0441\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0433\u043e \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0435 \u0441 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u043d\u044b\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u043e\u0431\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u0442\u044c \u043f\u0435\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0435 \u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u044f, \u0432\u044b\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u043d\u0435\u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c. \u0418\u0441\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-113646","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.5 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0414\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u0432\u044b\u043f\u0443\u0441\u043a\u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u043d\u043e\u0439 JavaScript-\u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b Node.js 21.6.2, 20.11.1, 18.19.1, \u0432 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043e 8 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 4 \u043f\u0440\u0438\u0441\u0432\u043e\u0435\u043d \u0432\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438: CVE-2024-21892 -.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/lv\/blog\/news\/uyazvimosti-v-node-js-i-libuv\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.5\" \/>\n\t\t<meta property=\"og:locale\" content=\"lv_LV\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Node.js \u0438 libuv | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0414\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u0432\u044b\u043f\u0443\u0441\u043a\u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u043d\u043e\u0439 JavaScript-\u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b Node.js 21.6.2, 20.11.1, 18.19.1, \u0432 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043e 8 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 4 \u043f\u0440\u0438\u0441\u0432\u043e\u0435\u043d \u0432\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438: CVE-2024-21892 -.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/lv\/blog\/news\/uyazvimosti-v-node-js-i-libuv\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2024-02-16T20:02:41+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2024-02-16T20:02:41+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Vulnerabilit\u0101tes Node.js un libuv | ProHoster","description":"Pieejami labojumi JavaScript servera platformai Node.js versij\u0101m 21.6.2, 20.11.1, 18.19.1, kuros tika nov\u0113rstas 8 ievainojam\u012bbas, no kur\u0101m 4 ir pie\u0161\u0137irta augsta b\u012bstam\u012bbas pak\u0101pe: CVE-2024-21892 -.","canonical_url":"https:\/\/prohoster.info\/lv\/blog\/news\/uyazvimosti-v-node-js-i-libuv","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"lv_LV","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Node.js \u0438 libuv | ProHoster","og:description":"\u0414\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u0432\u044b\u043f\u0443\u0441\u043a\u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u043d\u043e\u0439 JavaScript-\u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b Node.js 21.6.2, 20.11.1, 18.19.1, \u0432 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043e 8 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 4 \u043f\u0440\u0438\u0441\u0432\u043e\u0435\u043d \u0432\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438: CVE-2024-21892 -.","og:url":"https:\/\/prohoster.info\/lv\/blog\/news\/uyazvimosti-v-node-js-i-libuv","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2024-02-16T20:02:41+00:00","article:modified_time":"2024-02-16T20:02:41+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"113646","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-02-08 20:23:59","updated":"2026-02-08 20:23:59","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/posts\/113646","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/comments?post=113646"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/posts\/113646\/revisions"}],"predecessor-version":[{"id":164177,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/posts\/113646\/revisions\/164177"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/media?parent=113646"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/categories?post=113646"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/tags?post=113646"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}