Skip to content
OpenAdvisories

Package · Debian

node-uri-js

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2026-93690

    uri-js through 4.4.1 Denial of Service via removeDotSegments

    uri-js through 4.4.1 contains a denial of service vulnerability in the removeDotSegments function that loops infinitely when a path segment begins with Unicode line or paragraph separators. Attackers can trigger this by calling removeDotSegments directly or t…

    garycourt uri-js node-uri-js node-uri-js Debian Ubuntu