What’s Vulnerable › Vulnerabilities

CVE-2025-67899

• Severity: low (CVSS 2.9 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-12-14 · updated 2026-10-14
• Weakness: CWE-674

Description

uriparser through 0.9.9 allows unbounded recursion and stack consumption, as demonstrated by ParseMustBeSegmentNzNc with large input containing many commas.

Affected products

• uriparser: through 0.9.9

References

• https://github.com/uriparser/uriparser/issues/282
• https://github.com/uriparser/uriparser/pull/284
• http://www.openwall.com/lists/oss-security/2025/12/15/1

Get alerted when CVE-2025-67899 or the next vulnerability affects your stack