CVE-2026-42371

Опубликовано: 27 апр. 2026

Источник: nvd

CVSS3: 5.1

EPSS Низкий

Описание

uriparser before 1.0.1 has numeric truncation in text range comparison, if an application accepts URIs with a length in gigabytes.

Ссылки

https://github.com/uriparser/uriparser/pull/298
Issue Tracking
Patch
https://uriparser.github.io
Product
http://www.openwall.com/lists/oss-security/2026/04/27/2
Mailing List
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:uriparser_project:uriparser:*:*:*:*:*:*:*:*

Версия до 1.0.1 (исключая)

EPSS

Процентиль: 7%

0.00172

Низкий

5.1 Medium

CVSS3

Дефекты

CWE-197

Связанные уязвимости

CVE-2026-42371

CVSS3: 5.1

ubuntu

4 месяца назад

uriparser before 1.0.1 has numeric truncation in text range comparison, if an application accepts URIs with a length in gigabytes.

CVE-2026-42371

CVSS3: 4.7

redhat

4 месяца назад

uriparser before 1.0.1 has numeric truncation in text range comparison, if an application accepts URIs with a length in gigabytes.

CVE-2026-42371

CVSS3: 5.1

debian

4 месяца назад

uriparser before 1.0.1 has numeric truncation in text range comparison ...

GHSA-3f6w-rmcx-pgmh

CVSS3: 5.1

github

4 месяца назад

uriparser before 1.0.1 has numeric truncation in text range comparison, if an application accepts URIs with a length in gigabytes.

openSUSE-SU-2026:21297-1

suse-cvrf

около 1 месяца назад

Security update for uriparser

EPSS

Процентиль: 7%

0.00172

Низкий

5.1 Medium

CVSS3

Дефекты

CWE-197