PT-2026-35358 · Uriparser · Uriparser

Published 2026-04-27 · Updated 2026-04-27 · CVE-2026-42371

Mitre

CVSS v3.1

5.1

Medium

AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

uriparser before 1.0.1 has numeric truncation in text range comparison, if an application accepts URIs with a length in gigabytes.

Fix

Weakness Enumeration

CWE-197

Related Identifiers

CVE-2026-42371

Affected Products

Uriparser

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2026-42371 · Security Note
• https://github.com/uriparser/uriparser/pull/298 · Note
• https://uriparser.github.io · Note