Numeric Truncation Vulnerability in uriparser Product by uriparser

CVE-2026-42371

What is CVE-2026-42371?

The uriparser library, prior to version 1.0.1, is susceptible to a numeric truncation vulnerability during text range comparisons. This issue arises particularly when applications process URIs of significant length, measured in gigabytes. Such a vulnerability can cause unexpected behavior, leading to potential security risks in applications that rely on proper URI parsing. Careful attention is required when upgrading to the latest version to mitigate any associated risks.

References