oss-sec mailing list archives
uriparser 1.0.0 fixes CVE-2025-67899 (DoS, CWE-674)
From: Sebastian Pipping <sebastian () pipping org>
Date: Mon, 15 Dec 2025 21:33:42 +0100
Hello oss-security, just a quick note that uriparser 1.0.0 released today is fixing CVE-2025-67899: denial of service through unbound recursion. Some key links are: - The change log of release 1.0.0 https://github.com/uriparser/uriparser/blob/uriparser-1.0.0/ChangeLog - The fixing pull request https://github.com/uriparser/uriparser/pull/284 - The official CVE metadata https://nvd.nist.gov/vuln/detail/CVE-2025-67899 Best Sebastian
Current thread:
- uriparser 1.0.0 fixes CVE-2025-67899 (DoS, CWE-674) Sebastian Pipping (Dec 15)
