Login Request a demo
UR
Product
Uriparser
by Uriparser Project · last CVE May 8, 2026
11
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities11In the news0Timeline
Severity mix
Critical 3High 2Medium 6Low 0
Severity
All severities11Critical3High2Medium6Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Uriparser to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2018-20721
9.8
2%
Jan 16
URI_FUNC() in UriParse.c in uriparser before 0.9.1 has an out-of-bounds read (in uriParse*Ex* functions) for an incomplete URI with an IPv6 address containing an embedded IPv4…
Affected: before 0.9.1
CVE-2018-19199
9.8
2%
Nov 12
An issue was discovered in uriparser before 0.9.0
Affected: before 0.9.0
CVE-2018-19198
9.8
2%
Nov 12
An issue was discovered in uriparser before 0.9.0
Affected: before 0.9.0
CVE-2024-34402
8.6
1%
May 3
An issue was discovered in uriparser through 0.9.7
Affected: through 0.9.7
CVE-2018-19200
7.5
2%
Nov 12
An issue was discovered in uriparser before 0.9.0
Affected: before 0.9.0
CVE-2024-34403
5.9
1%
May 3
An issue was discovered in uriparser through 0.9.7
Affected: through 0.9.7
CVE-2021-46142
5.5
1%
Jan 6
An issue was discovered in uriparser before 0.9.6
Affected: before 0.9.6
CVE-2021-46141
5.5
1%
Jan 6
An issue was discovered in uriparser before 0.9.6
Affected: before 0.9.6
CVE-2026-44928
5.3
0%
May 8
In uriparser before 1.0.2, the function family EqualsUri can misclassify two unequal URIs as equal
Affected: before 1.0.2
CVE-2026-44927
5.3
0%
May 8
In uriparser before 1.0.2, there is pointer difference truncation to int in various places
Affected: before 1.0.2
CVE-2026-42371
5.1
0%
Apr 27
uriparser before 1.0.1 has numeric truncation in text range comparison, if an application accepts URIs with a length in gigabytes
Affected: before 1.0.1
Showing 11