Uriparser Project Uriparser vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Uriparser Project Uriparser: 4 record(s), with affected versions and fixes.cpe:2.3:a:uriparser_project:uriparser
CVE-2026-44928
Medium · 5.3
CWE-670 May 8, 2026
Always-Incorrect Control Flow Implementation in Uriparser Project Uriparser
In uriparser before 1.0.2, the function family EqualsUri can misclassify two unequal URIs as equal.
CVE-2026-44927
Medium · 5.3
CWE-197 May 8, 2026
In uriparser before 1.0.2, there is pointer difference truncation to int in various…
In uriparser before 1.0.2, there is pointer difference truncation to int in various places.
CVE-2026-42371
Medium · 5.1
CWE-197 Apr 27, 2026
uriparser before 1.0.1 has numeric truncation in text range comparison, if an…
uriparser before 1.0.1 has numeric truncation in text range comparison, if an application accepts URIs with a length in gigabytes.
CVE-2025-67899
Low · 2.9
CWE-674 Dec 14, 2025
uriparser through 0.9.9 allows unbounded recursion and stack consumption, as demonstrated by...
uriparser through 0.9.9 allows unbounded recursion and stack consumption, as demonstrated by ParseMustBeSegmentNzNc with large input containing many commas.