CVE-2026-42371

Medium

uriparser before 1.0.1 has numeric truncation in text range comparison, if an application accepts URIs with a length in gigabytes.

mitre·CWE-197·Published 2026-04-27

CVSS

5.1

EPSS

0.00

KEV

Exploits

cve.orgen

130 chars

uriparser before 1.0.1 has numeric truncation in text range comparison, if an application accepts URIs with a length in gigabytes.

NVDen

130 chars

uriparser before 1.0.1 has numeric truncation in text range comparison, if an application accepts URIs with a length in gigabytes.

Version	Type	Source	Base	Exp	Impact	Vector
3.1	Primary	NVD	5.1	1.4	3.6	CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
3.1	Primary	cve.org	5.1	—	—	CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
3.1	Secondary	NVD	5.1	1.4	3.6	CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H