Lucene search
K

17 matches found

OSV
OSV
added 2026/05/09 12:32 p.m.3 views

OESA-2026-2230 uriparser security update

The package is a strictly RFC 3986 compliant URI parsing library written in C89"ANSI C". uriparser is cross-platform, fast, supports Unicode and is licensed under the New BSD license. There are a number of applications, libraries and hardware using uriparser, as well as bindings and 3rd-party...

5.1CVSS5.8AI score0.00007EPSS
Exploits0References3
OSV
OSV
added 2026/05/03 9:57 a.m.6 views

OESA-2026-2188 uriparser security update

The package is a strictly RFC 3986 compliant URI parsing library written in C89"ANSI C". uriparser is cross-platform, fast, supports Unicode and is licensed under the New BSD license. There are a number of applications, libraries and hardware using uriparser, as well as bindings and 3rd-party...

5.1CVSS5.8AI score0.00007EPSS
Exploits0References3
SUSE CVE
SUSE CVE
added 2026/04/28 1:34 a.m.2 views

SUSE CVE-2026-42371

uriparser before 1.0.1 has numeric truncation in text range comparison, if an application accepts URIs with a length in gigabytes...

5.1CVSS5.2AI score0.00005EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2026/04/27 12:48 p.m.1 views

CVE-2026-42371

A flaw was found in uriparser. This vulnerability occurs due to numeric truncation in text range comparison when an application processes extremely long Uniform Resource Identifiers URIs, specifically those with lengths in gigabytes. A local attacker could exploit this flaw by providing a...

5.1CVSS5.3AI score0.00005EPSS
Exploits0References5
NVD
NVD
added 2026/04/27 7:16 a.m.1 views

CVE-2026-42371

uriparser before 1.0.1 has numeric truncation in text range comparison, if an application accepts URIs with a length in gigabytes...

5.1CVSS0.00005EPSS
Exploits0References3
UbuntuCve
UbuntuCve
added 2026/04/27 7:16 a.m.0 views

CVE-2026-42371

uriparser before 1.0.1 has numeric truncation in text range comparison, if an application accepts URIs with a length in gigabytes...

5.1CVSS5.8AI score0.00005EPSS
Exploits0References2
OSV
OSV
added 2026/04/27 7:16 a.m.0 views

UBUNTU-CVE-2026-42371

uriparser before 1.0.1 has numeric truncation in text range comparison, if an application accepts URIs with a length in gigabytes...

5.1CVSS5.8AI score0.00005EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2026/04/27 5:50 a.m.1 views

CVE-2026-42371

uriparser before 1.0.1 has numeric truncation in text range comparison, if an application accepts URIs with a length in gigabytes...

5.1CVSS5.2AI score0.00005EPSS
Exploits0References2
Cvelist
Cvelist
added 2026/04/27 5:50 a.m.26 views

CVE-2026-42371

uriparser before 1.0.1 has numeric truncation in text range comparison, if an application accepts URIs with a length in gigabytes...

5.1CVSS0.00005EPSS
Exploits0References2
CVE
CVE
added 2026/04/27 5:50 a.m.65 views

CVE-2026-42371

CVE-2026-42371 affects uriparser prior to 1.0.1. The issue is a numeric truncation in text range comparison when parsing extremely long URIs (potentially gigabytes long). Impact: availability could be affected. Exploitation details are not provided in the sources. Mitigation: upgrade to uriparser...

5.1CVSS5.2AI score0.00005EPSS
Exploits0References3Affected Software1
EUVD
EUVD
added 2026/04/27 5:50 a.m.1 views

EUVD-2026-25776

uriparser before 1.0.1 has numeric truncation in text range comparison, if an application accepts URIs with a length in gigabytes...

5.1CVSS5.2AI score0.00005EPSS
Exploits0References2
AlpineLinux
AlpineLinux
added 2026/04/27 5:50 a.m.3 views

CVE-2026-42371

uriparser before 1.0.1 has numeric truncation in text range comparison, if an application accepts URIs with a length in gigabytes...

5.1CVSS5.8AI score0.00005EPSS
Exploits0References3
Snyk
Snyk
added 2026/04/27 5:50 a.m.3 views

Integer Overflow or Wraparound

Overview Affected versions of this package are vulnerable to Integer Overflow or Wraparound in the text range comparison process when handling extremely long Uniform Resource Identifiers. An attacker can cause the application to become unavailable by supplying a malformed, excessively long URI...

5.9CVSS5.8AI score0.00005EPSS
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2026/04/27 5:50 a.m.1 views

CVE-2026-42371

uriparser before 1.0.1 has numeric truncation in text range comparison, if an application accepts URIs with a length in gigabytes...

5.1CVSS5.2AI score0.00005EPSS
Exploits0References3
Debian CVE
Debian CVE
added 2026/04/27 5:50 a.m.1 views

CVE-2026-42371

uriparser before 1.0.1 has numeric truncation in text range comparison, if an application accepts URIs with a length in gigabytes...

5.1CVSS5.2AI score0.00005EPSS
Exploits0
CNNVD
CNNVD
added 2026/04/27 12:0 a.m.5 views

Uriparser 安全漏洞

UriParser is a C89-compatible library for parsing and processing URIs, strictly conforming to RFC 3986 standards. Versions of UriParser prior to 1.0.1 contained security vulnerabilities, which were caused by numerical truncation during text range comparisons...

5.1CVSS5.8AI score0.00005EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2026/04/27 12:0 a.m.3 views

PT-2026-35358

Name of the Vulnerable Software and Affected Versions uriparser versions prior to 1.0.1 Description Numeric truncation occurs during text range comparison when an application accepts URIs with a length in gigabytes. This issue is characterized as an integer overflow, which happens when a numeric...

6.3CVSS5.8AI score0.00105EPSS
Exploits0References26
Rows per page
Query Builder