362 matches found
CVE-2026-44927
A flaw was found in uriparser. This vulnerability involves pointer difference truncation, where calculations involving memory addresses are incorrectly shortened. This could lead to minor data integrity issues within the application. Exploitation of this flaw requires local access to the system a...
OPENSUSE-SU-2026:20910-1 Security update for uriparser
This update for uriparser fixes the following issue: - CVE-2025-67899: unbounded recursion and stack consumption bsc1255000...
SUSE-SU-2026:22084-1 Security update for uriparser
This update for uriparser fixes the following issue: - CVE-2025-67899: unbounded recursion and stack consumption bsc1255000...
PHP 8.5.x < 8.5.7 Multiple Vulnerabilities
The version of PHP installed on the remote host is prior to 8.5.7. It is, therefore, affected by multiple vulnerabilities as referenced in the Version 8.5.7 advisory. - In uriparser before 1.0.2, the function family EqualsUri can misclassify two unequal URIs as equal. CVE-2026-44928 - In uriparse...
[SECURITY] Fedora 43 Update: uriparser-1.0.2-1.fc43
Uriparser is a strictly RFC 3986 compliant URI parsing library written in C. uriparser is cross-platform, fast, supports Unicode and is licensed under the New BSD license...
Amazon Linux 2023 : php8.5, php8.5-bcmath, php8.5-cli (ALAS2023-2026-1733)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-1733 advisory. PHP: Failure to setup TLS with a remote server can result in a remote DoS CVE-2026-12184 uriparser before 1.0.1 has numeric truncation in text range comparison, if an application accepts URIs...
Fedora 43 : uriparser (2026-aa5877c5ba)
The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-aa5877c5ba advisory. Update to uriparser-1.0.2. ---- Update to uriparser-1.0.1. Tenable has extracted the preceding description block directly from the Fedora security advisory...
Important: php8.5
Issue Overview: PHP: Failure to setup TLS with a remote server can result in a remote DoS CVE-2026-12184 uriparser before 1.0.1 has numeric truncation in text range comparison, if an application accepts URIs with a length in gigabytes. CVE-2026-42371 In uriparser before 1.0.2, there is pointer...
OESA-2026-2301 uriparser security update
The package is a strictly RFC 3986 compliant URI parsing library written in C89"ANSI C". uriparser is cross-platform, fast, supports Unicode and is licensed under the New BSD license. There are a number of applications, libraries and hardware using uriparser, as well as bindings and 3rd-party...
Fedora 42 : uriparser (2026-593d463bbf)
The remote Fedora 42 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-593d463bbf advisory. Update to uriparser-1.0.1. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested...
uriparser: uriparser: Data integrity issue due to pointer truncation
A flaw was found in uriparser. This vulnerability involves pointer difference truncation, where calculations involving memory addresses are incorrectly shortened. This could lead to minor data integrity issues within the application. Exploitation of this flaw requires local access to the system a...
Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: uriparser: mingw32-uriparser-1.0.2-1.hum1 noarch mingw64-uriparser-1.0.2-1.hum1 noarch uriparser-1.0.2-1.hum1 aarch64, x8664 uriparser-devel-1.0.2-1.hum1 aarch64, x8664 uriparser-doc-1.0.2-1.hum1...
uriparser: uriparser: Incorrect URI comparison leading to integrity issues
A flaw was found in uriparser. The EqualsUri function can incorrectly identify distinct Uniform Resource Identifiers URIs as identical. This misclassification can lead to improper URI handling within applications that use uriparser, potentially compromising data integrity...
OESA-2026-2230 uriparser security update
The package is a strictly RFC 3986 compliant URI parsing library written in C89"ANSI C". uriparser is cross-platform, fast, supports Unicode and is licensed under the New BSD license. There are a number of applications, libraries and hardware using uriparser, as well as bindings and 3rd-party...
OESA-2026-2229 uriparser security update
The package is a strictly RFC 3986 compliant URI parsing library written in C89"ANSI C". uriparser is cross-platform, fast, supports Unicode and is licensed under the New BSD license. There are a number of applications, libraries and hardware using uriparser, as well as bindings and 3rd-party...
SUSE CVE-2026-44927
In uriparser before 1.0.2, there is pointer difference truncation to int in various places...
SUSE CVE-2026-44928
In uriparser before 1.0.2, the function family EqualsUri can misclassify two unequal URIs as equal...
Unity Linux 20.1060e / 20.1070e Security Update: uriparser (UTSA-2026-017362)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017362 advisory. An issue was discovered in uriparser before 0.9.6. It performs invalid free operations in uriFreeUriMembers and uriMakeOwner. Tenable has extracted the preceding...
Unity Linux 20.1060e / 20.1070e Security Update: uriparser (UTSA-2026-017363)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017363 advisory. An issue was discovered in uriparser before 0.9.6. It performs invalid free operations in uriNormalizeSyntax. Tenable has extracted the preceding description block...
