Unbounded Recursion Vulnerability in uriparser Affects Various Applications

CVE-2025-67899

What is CVE-2025-67899?

The vulnerability in uriparser allows for unbounded recursion, which can lead to excessive stack consumption when large input containing multiple commas is processed. This flaw compromises the stability and performance of applications utilizing uriparser for URI parsing, potentially resulting in crashes or denial-of-service conditions. Developers and organizations using this library should evaluate their implementations and apply patches or mitigations to avoid exploitation.

References