6 results · Feed
-
Low 2.9
In uriparser before 1.0.2, the function family EqualsUri can misclassify two unequal URIs as equal.
-
Low 2.9
In uriparser before 1.0.2, there is pointer difference truncation to int in various places.
-
Medium 5.1
uriparser before 1.0.1 has numeric truncation in text range comparison, if an application accepts URIs with a length in…
-
Low 2.9
uriparser through 0.9.9 allows unbounded recursion and stack consumption, as demonstrated by ParseMustBeSegmentNzNc wit…
-
Medium 5.9
An issue was discovered in uriparser through 0.9.7. ComposeQueryMallocExMm in UriQuery.c has an integer overflow via a …
-
High 8.6
An issue was discovered in uriparser through 0.9.7. ComposeQueryEngine in UriQuery.c has an integer overflow via long k…