oss-sec mailing list archives

uriparser 1.0.0 fixes CVE-2025-67899 (DoS, CWE-674)


From: Sebastian Pipping <sebastian () pipping org>
Date: Mon, 15 Dec 2025 21:33:42 +0100

Hello oss-security,


just a quick note that uriparser 1.0.0 released today is fixing
CVE-2025-67899: denial of service through unbound recursion.

Some key links are:

- The change log of release 1.0.0
  https://github.com/uriparser/uriparser/blob/uriparser-1.0.0/ChangeLog

- The fixing pull request
  https://github.com/uriparser/uriparser/pull/284

- The official CVE metadata
  https://nvd.nist.gov/vuln/detail/CVE-2025-67899

Best



Sebastian


Current thread: