Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2026-44928

Опубликовано: 08 мая 2026
Источник: redhat
CVSS3: 5.3
EPSS Низкий

Описание

In uriparser before 1.0.2, the function family EqualsUri can misclassify two unequal URIs as equal.

A flaw was found in uriparser. The EqualsUri function can incorrectly identify distinct Uniform Resource Identifiers (URIs) as identical. This misclassification can lead to improper URI handling within applications that use uriparser, potentially compromising data integrity.

Отчет

A Moderate integrity flaw was found in uriparser, where the EqualsUri function can incorrectly identify distinct URIs as identical. This misclassification can lead to improper URI handling within applications utilizing uriparser, potentially compromising data integrity in Red Hat products that rely on accurate URI differentiation.

Меры по смягчению последствий

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 7uriparserOut of support scope
Red Hat Enterprise Linux AI (RHEL AI) 3uriparserFix deferred
Red Hat Hardened Imagesuriparser-main-1.0.2-1.hum1FixedRHSA-2026:1634112.05.2026

Показывать по

Дополнительная информация

Статус:

Moderate
Дефект:
CWE-1025
https://bugzilla.redhat.com/show_bug.cgi?id=2467974uriparser: uriparser: Incorrect URI comparison leading to integrity issues

EPSS

Процентиль: 11%
0.00211
Низкий

5.3 Medium

CVSS3

Связанные уязвимости

CVSS3: 2.9
ubuntu
3 месяца назад

In uriparser before 1.0.2, the function family EqualsUri can misclassify two unequal URIs as equal.

CVSS3: 2.9
nvd
3 месяца назад

In uriparser before 1.0.2, the function family EqualsUri can misclassify two unequal URIs as equal.

CVSS3: 2.9
debian
3 месяца назад

In uriparser before 1.0.2, the function family EqualsUri can misclassi ...

CVSS3: 2.9
github
3 месяца назад

In uriparser before 1.0.2, the function family EqualsUri can misclassify two unequal URIs as equal.

suse-cvrf
25 дней назад

Security update for uriparser

EPSS

Процентиль: 11%
0.00211
Низкий

5.3 Medium

CVSS3