TI-2026-82205 CVE-2026-118664 · GHSA-qr28-fpjm-wq7f
decode-uri-component: Denial of service via quadratic replacement of percent-encoded runs
Priority LOW 36
decode-uri-component provides a more robust alternative to decodeURIComponent.
No SamVerschueren vulnerabilities are listed in CISA KEV.
2 records
decode-uri-component provides a more robust alternative to decodeURIComponent.
decode-uri-component through 0.4.1 is vulnerable to denial of service.