TI-2018-13621 CVE-2018-19199 · GHSA-75xm-fm6x-r3wr
An issue was discovered in uriparser before 0.9.0.
Priority MEDIUM 47
An issue was discovered in uriparser before 0.9.0.
uriparser
Records12All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical3CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9
Exploited now
uriparser records in CISA KEVNo uriparser vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
12 records
TI-2018-13620 CVE-2018-19198 · GHSA-8cr6-2pcf-qg5m
An issue was discovered in uriparser before 0.9.0.
Priority MEDIUM 47
An issue was discovered in uriparser before 0.9.0.
TI-2024-22740 CVE-2024-34402 · GHSA-hwpw-xpj3-c397
An issue was discovered in uriparser through 0.9.7.
Priority MEDIUM 46
An issue was discovered in uriparser through 0.9.7.
TI-2018-14704 CVE-2018-20721 · GHSA-vxxw-p73w-mwf4
URI_FUNC() in UriParse.c in uriparser before 0.9.1 has an out-of-bounds read (in…
Priority MEDIUM 46
URI_FUNC() in UriParse.c in uriparser before 0.9.1 has an out-of-bounds read (in uriParse*Ex* functions) for an incomplete URI with an IPv6 address containing an embedded IPv4 address, such as a "//[::44.1" address.
TI-2018-13622 CVE-2018-19200 · GHSA-gjmj-x7m9-7jqw
An issue was discovered in uriparser before 0.9.0.
Priority LOW 37
An issue was discovered in uriparser before 0.9.0.
TI-2024-22741 CVE-2024-34403 · GHSA-c6h3-4727-9w7w
An issue was discovered in uriparser through 0.9.7.
Priority LOW 29
An issue was discovered in uriparser through 0.9.7.
TI-2021-21075 CVE-2021-46142 · GHSA-5jh9-cx9r-v7ww
An issue was discovered in uriparser before 0.9.6.
Priority LOW 27
An issue was discovered in uriparser before 0.9.6.
TI-2021-21074 CVE-2021-46141 · GHSA-h7v5-6w5c-368p
An issue was discovered in uriparser before 0.9.6.
Priority LOW 27
An issue was discovered in uriparser before 0.9.6.
TI-2026-32795 CVE-2026-44928 · GHSA-xw5w-xhjv-gf29
In uriparser before 1.0.2, the function family EqualsUri can misclassify two unequal URIs as equal.
Priority LOW 23
In uriparser before 1.0.2, the function family EqualsUri can misclassify two unequal URIs as equal.
TI-2026-32794 CVE-2026-44927 · GHSA-gmxg-5w57-j63q
In uriparser before 1.0.2, there is pointer difference truncation to int in various places.
Priority LOW 23
In uriparser before 1.0.2, there is pointer difference truncation to int in various places.
TI-2026-30671 CVE-2026-42371 · GHSA-3f6w-rmcx-pgmh
uriparser before 1.0.1 has numeric truncation in text range comparison, if an application…
Priority LOW 22
uriparser before 1.0.1 has numeric truncation in text range comparison, if an application accepts URIs with a length in gigabytes.
TI-2025-41512 CVE-2025-67899 · GHSA-h2vr-rqqp-xv8m
Uncontrolled recursion in uriparser
Priority LOW 13
uriparser through 0.9.9 allows unbounded recursion and stack consumption, as demonstrated by ParseMustBeSegmentNzNc with large input containing many commas.