decode-uri-component

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

Medium 6.6

CVE-2026-45822

decode-uri-component: Denial of service via exponential decoding of malformed percent-encoded input

decode-uri-component through 0.4.1 is vulnerable to denial of service. The decode() function splits input on '%' producing N tokens and calls decodeComponents(), exhibiting super-linear parsing time: 200 '%ab' tokens takes approximately 0.7s, 700 tokens appro…

SamVerschueren decode-uri-component decode-uri-component node-source-map-resolve Ubuntu npm

Jun 30, 2026