Unbounded Recursion Vulnerability in uriparser Affects Various Applications
CVE-2025-67899

2.9LOW

Key Information:

Vendor

Uriparser Project

Status
Uriparser
Vendor
CVE Published:
14 December 2025

What is CVE-2025-67899?

The vulnerability in uriparser allows for unbounded recursion, which can lead to excessive stack consumption when large input containing multiple commas is processed. This flaw compromises the stability and performance of applications utilizing uriparser for URI parsing, potentially resulting in crashes or denial-of-service conditions. Developers and organizations using this library should evaluate their implementations and apply patches or mitigations to avoid exploitation.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

uriparser 0 <= 0.9.9

References

https://github.com/uriparser/uriparser/issues/282
https://github.com/uriparser/uriparser/pull/284

CVSS V3.1

Score:
2.9
Severity:
LOW
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.