Skip to content
OpenAdvisories

Package · npm

decode-uri-component

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.2
    CVE-2026-118664

    decode-uri-component: Denial of service via quadratic replacement of percent-encoded runs

    decode-uri-component provides a more robust alternative to decodeURIComponent. Prior to 0.5.1, decodeUriComponent in index.js falls back to customDecodeURIComponent after native decoding throws, and the fallback collects every distinct percent-encoded run bef…

    SamVerschueren decode-uri-component decode-uri-component npm
  • High 7.5
    CVE-2022-38900 EPSS 23%

    decode-uri-component vulnerable to Denial of Service (DoS)

    decode-uri-component 0.2.0 is vulnerable to Improper Input Validation resulting in DoS.

    decode-uri-component npm