243 matches found
CVE-2025-55763
CVE-2025-55763 Buffer Overflow in the URI parser of CivetWeb 1.16 latest release as of yet. Vulnerable code The crash occurs here in src/civetweb.c during the last strcat marked. Fix See the pull request. PoC The PoC crashes the server performing an heap overflow, however it is possible to achiev...
CLEANSTART-2026-UZ95959 fast-uri is a URI parser for Node
Security vulnerability affects the argo-workflows package. fast-uri is a URI parser for Node...
CLEANSTART-2026-HJ14733 fast-uri is a URI parser for Node
Security vulnerability affects the argo-workflows package. fast-uri is a URI parser for Node...
CLEANSTART-2026-HW63171 Jetty URI parser has some key differences to other common parsers when evaluating invalid or unusual URIs
Security vulnerability affects the trino package. The Jetty URI parser has some key differences to other common parsers when evaluating invalid or unusual URIs...
CVE-2026-109821
A flaw was found in Elixir. This vulnerability allows an attacker to cause a Denial of Service DoS through CPU exhaustion by providing a Uniform Resource Identifier URI containing an excessively long port number. Because the URI parser does not properly validate or bound the length of the port...
CLEANSTART-2026-WP68198 fast-uri is a dependency-free RFC 3986 URI parser and serializer for Node
Security vulnerability affects the langfuse package. fast-uri is a dependency-free RFC 3986 URI parser and serializer for Node...
CLEANSTART-2026-XT83401 Jetty URI parser has some key differences to other common parsers when evaluating invalid or unusual URIs
CVE-2025-11143 affects multiple packages. The Jetty URI parser has some key differences to other common parsers when evaluating invalid or unusual URIs. See references for individual vulnerability details...
Security Bulletin: Vulnerability in InformixHQ
Summary Upgrade to InformixHQ 3.3.3 Vulnerability Details CVEID:CVE-2026-75899 DESCRIPTION: fast-uri is a URI parser for Node.js. It decodes percent escapes in a hostname during parsing and then decodes the parsed hostname a second time during authority recomposition, so a single call to normaliz...
CLEANSTART-2026-VU54195 Jetty URI parser has some key differences to other common parsers when evaluating invalid or unusual URIs
CVE-2025-11143 affects multiple packages. The Jetty URI parser has some key differences to other common parsers when evaluating invalid or unusual URIs. See references for individual vulnerability details...
CLEANSTART-2026-TT39910 fast-uri is a dependency-free RFC 3986 URI parser for Node
Security vulnerability affects the renovate package. fast-uri is a dependency-free RFC 3986 URI parser for Node...
CLEANSTART-2026-RT07461 fast-uri is a URI parser for Node
Security vulnerability affects the renovate package. fast-uri is a URI parser for Node...
CLEANSTART-2026-DR67941 fast-uri is a URI parser for Node
Security vulnerability affects the renovate package. fast-uri is a URI parser for Node...
CLEANSTART-2026-LS30784 fast-uri is a URI parser for Node
Security vulnerability affects the renovate package. fast-uri is a URI parser for Node...
CLEANSTART-2026-YV60334 Jetty URI parser has some key differences to other common parsers when evaluating invalid or unusual URIs
Security vulnerability affects the trino package. The Jetty URI parser has some key differences to other common parsers when evaluating invalid or unusual URIs...
EUVD-2026-104814
fast-uri vulnerable to URI scheme spoofing via percent-encoded scheme decoding...
EUVD-2026-104813
fast-uri vulnerable to host confusion via unchecked WHATWG host canonicalization...
EUVD-2026-104807
fast-uri vulnerable to scheme injection via an unescaped first-segment colon in suffix references...
CLEANSTART-2026-RP92768 Jetty URI parser has some key differences to other common parsers when evaluating invalid or unusual URIs
Security vulnerability affects the kafka package. The Jetty URI parser has some key differences to other common parsers when evaluating invalid or unusual URIs...
PT-2026-134744
Security vulnerability affects the kafka package. The Jetty URI parser has some key differences to other common parsers when evaluating invalid or unusual URIs...
SUSE CVE-2026-110180
fast-uri is a dependency-free RFC 3986 URI parser and serializer for Node.js. In versions from 2.4.2 through 2.4.7, from 3.1.3 through 3.1.8, and from 4.0.1 through 4.2.2, for HTTP-family schemes the canonicalizeHost function passes the parsed host to the WHATWG URL parser and adopts its hostname...