CVE-2026-45822 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines, kibana, wazuh-dashboard, nextcloud-server, gitlab-rails-ce, wazuh-dashboard-fips, gitlab-rails-ce-fips, opensearch-dashboards-fips, sqlpad, vitess, commercial-gitlab-rails-ee-fips, commercial-gitlab-rails-ee, dotstatsuite-supercore,...

CVE-2026-45822

decode-uri-component through 0.4.1 is vulnerable to denial of service. The decode function splits input on '%' producing N tokens and calls decodeComponents, exhibiting super-linear parsing time: 200 '%ab' tokens takes approximately 0.7s, 700 tokens approximately 6s, and 1400 tokens approximately...