Approved changes feed: RSS · Atom

cpe:2.3:a:uriparser_project:uriparser:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorUriparser Project (5a146825-e252-587d-8ad5-c70e02691950)
ProductUriparser (68dc642a-bcc3-50ae-b9c1-9dcacb319077)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/uriparser purl2cpe 2026-06-01 10:17:30.107274
pkg:deb/ubuntu/uriparser purl2cpe 2026-06-01 10:17:30.107278
pkg:github/uriparser/uriparser purl2cpe 2026-06-01 10:17:30.107282
pkg:nuget/uriparser purl2cpe 2026-06-01 10:17:30.107285
pkg:rpm/fedora/uriparser purl2cpe 2026-06-01 10:17:30.107288
pkg:rpm/opensuse/uriparser purl2cpe 2026-06-01 10:17:30.107291
pkg:sourceforge/uriparser purl2cpe 2026-06-01 10:17:30.107295

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-44928 vulnerable 2026-06-08 08:05:11.383912 Details available
LOW (2.9)
In uriparser before 1.0.2, the function family EqualsUri can misclassify two unequal URIs as equal.
Published: 2026-05-08T07:15:28.378Z
Updated: 2026-05-10T05:45:32.602Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-44927 vulnerable 2026-06-08 08:05:11.383435 Details available
LOW (2.9)
In uriparser before 1.0.2, there is pointer difference truncation to int in various places.
Published: 2026-05-08T07:13:04.720Z
Updated: 2026-05-10T05:46:18.606Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-42371 vulnerable 2026-06-08 08:03:16.256380 Details available
MEDIUM (5.1)
uriparser before 1.0.1 has numeric truncation in text range comparison, if an application accepts URIs with a length in gigabytes.
Published: 2026-04-27T05:50:36.185Z
Updated: 2026-04-27T14:41:22.410Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-67899 vulnerable 2026-06-08 07:41:20.569231 Details available
LOW (2.9)
uriparser through 0.9.9 allows unbounded recursion and stack consumption, as demonstrated by ParseMustBeSegmentNzNc with large input containing many commas.
Published: 2025-12-14T22:17:42.217Z
Updated: 2025-12-15T23:04:11.694Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-34403 vulnerable 2026-06-08 06:37:33.243635 Details available
An issue was discovered in uriparser through 0.9.7. ComposeQueryMallocExMm in UriQuery.c has an integer overflow via a long string.
Published: 2024-05-03T00:00:00.000Z
Updated: 2025-11-04T17:20:39.931Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-34402 vulnerable 2026-06-08 06:37:33.241047 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-46142 vulnerable 2026-06-08 05:36:49.770268 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-46141 vulnerable 2026-06-08 05:36:49.766554 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-20721 vulnerable 2026-06-08 05:11:27.783391 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-19200 vulnerable 2026-06-08 05:11:15.456753 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-19199 vulnerable 2026-06-08 05:11:15.456183 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-19198 vulnerable 2026-06-08 05:11:15.455571 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.