cbcvebase.

Samverschueren Decode-Uri-Component vulnerabilities

1 known vulnerability affecting samverschueren/decode-uri-component.

Total CVEs
1
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
MEDIUM1

Vulnerabilities

Page 1 of 1
CVE-2026-45822P3MEDIUMCVSS 6.6≥ 0.1.0, < 0.5.02026-06-30
CVE-2026-45822 [MEDIUM] CWE-400 CVE-2026-45822: decode-uri-component through 0.4.1 is vulnerable to denial of service. The decode() function splits decode-uri-component through 0.4.1 is vulnerable to denial of service. The decode() function splits input on '%' producing N tokens and calls decodeComponents(), exhibiting super-linear parsing time: 200 '%ab' tokens takes approximately 0.7s, 700 tokens approximately 6s, and 1400 tokens approximately 33s. An attacker can cause significant CPU consump
nvd
Samverschueren Decode-Uri-Component vulnerabilities | cvebase