EUVD-2022-7447

🗓️ 03 Oct 2025 20:07:09Reported by EUVDType

decode-uri-component 0.2.0 has a vulnerability leading to Denial of Service due to input validation issue

Reporter	Title	Published	Views	Family All 109
IBM Security Bulletins	Security Bulletin: IBM Cognos Analytics Mobile (Android) is affected by multiple vulnerabilities	21 Oct 202415:52	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery Cartridge for IBM Cloud Pak for Data affected by vulnerability in Node.js decode-uri-component	30 Jan 202317:47	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Data is vulnerable to possible denial of service due to decode-uri-component (CVE-2022-38900 )	8 Aug 202414:38	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Security includes components with multiple known vulnerabilities	7 Jun 202316:53	–	ibm
IBM Security Bulletins	Security Bulletin: decode-uri-component is vulnerable to CVE-2022-38900 used in IBM Maximo Application Suite	5 Apr 202320:33	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Network Automation v2.4.3 addresses multiple security vulnerabilities	15 May 202313:02	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in nodejs decode-uri-component affect Cloud Pak System[CVE-2022-38900]	1 Aug 202412:45	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Business Automation Manager Open Editions 8.0.3	18 Jun 202414:01	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cognos Analytics has addressed multiple vulnerabilities	5 May 202316:01	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Certified Container operands may be vulnerable to denial of service due to [CVE-2022-38900]	28 Apr 202311:44	–	ibm

[
  {
    "enisaIdVendor": [
      {
        "id": "aa767d7f-0f10-3c3c-a21f-d46459dca018",
        "vendor": {
          "name": "n/a"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "a3a47171-9cd1-33b1-8453-8413f2811f3d",
        "product": {
          "name": "n/a"
        },
        "product_version": "n/a"
      }
    ]
  }
]

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2022-38900
github	www.github.com/SamVerschueren/decode-uri-component/issues/5
github	www.github.com/sindresorhus/query-string/issues/345
github	www.github.com/SamVerschueren/decode-uri-component/commit/746ca5dcb6667c5d364e782d53c542830e4c10b9
github	www.github.com/SamVerschueren/decode-uri-component
github	www.github.com/SamVerschueren/decode-uri-component/releases/tag/v0.2.1
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/ERN6YE3DS7NBW7UH44SCJBMNC2NWQ7SM
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/KAC5KQ2SEWAMQ6UZAUBZ5KXKEOESH375
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/QABOUA2I542UTANVZIVFKWMRYVHLV32D
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/UW4SCMT3SEUFVIL7YIADQ5K36GJEO6I5

03 Oct 2025 20:07Current

7High risk

Vulners AI Score7

CVSS 3.17.5

EPSS0.00429

SSVC