Priority LOW 23
In uriparser before 1.0.2, the function family EqualsUri can misclassify two unequal URIs as equal.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00211 · Published 2026-05-08 · Partial fix · 1.0.2 CWE-670
Priority LOW 23
In uriparser before 1.0.2, there is pointer difference truncation to int in various places.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00211 · Published 2026-05-08 · Partial fix · 1.0.2 CWE-197
Priority LOW 22
uriparser before 1.0.1 has numeric truncation in text range comparison, if an application accepts URIs with a length in gigabytes.
CVSS 3.1MEDIUM 5.1· Local · No auth · No interaction · EPSS 0.00172 · Published 2026-04-27 · Partial fix · 1.0.1 CWE-197
Priority LOW 13
uriparser through 0.9.9 allows unbounded recursion and stack consumption, as demonstrated by ParseMustBeSegmentNzNc with large input containing many commas.
CVSS 3.1LOW 2.9· Local · No auth · No interaction · EPSS 0.00141 · Published 2025-12-14 · Partial fix CWE-674
Priority LOW 29
An issue was discovered in uriparser through 0.9.7.
CVSS 3.1MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.01316 · Published 2024-05-03 · Will not fix CWE-190
Priority MEDIUM 46
An issue was discovered in uriparser through 0.9.7.
CVSS 3.1HIGH 8.6· Network · No auth · No interaction · EPSS 0.01233 · Published 2024-05-03 · Will not fix CWE-190
Priority LOW 27
An issue was discovered in uriparser before 0.9.6.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.01211 · Published 2022-01-06 · Will not fix CWE-416
Priority LOW 27
An issue was discovered in uriparser before 0.9.6.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.01172 · Published 2022-01-06 · Will not fix CWE-416
Priority MEDIUM 46
URI_FUNC() in UriParse.c in uriparser before 0.9.1 has an out-of-bounds read (in uriParse*Ex* functions) for an incomplete URI with an IPv6 address containing an embedded IPv4 address, such as a "//[::44.1" address.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0205 · Published 2019-01-16 · Fix deferred CWE-125
Priority LOW 37
An issue was discovered in uriparser before 0.9.0.
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.02322 · Published 2018-11-12 · Fix deferred CWE-476
Priority MEDIUM 47
An issue was discovered in uriparser before 0.9.0.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02338 · Published 2018-11-12 · Fixed CWE-190
Priority MEDIUM 47
An issue was discovered in uriparser before 0.9.0.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02367 · Published 2018-11-12 · Fixed CWE-787
THREATIST.IORead the docs