Ecosystem	Package	Version

Vulnerabilities

CVE-2025-67899

CVE-2025-67899

uriparser through 0.9.9 allows unbounded recursion and stack consumption, as demonstrated by ParseMustBeSegmentNzNc with large input containing many commas.

Published Dec 16, 2025

https://github.com/uriparser/uriparser/blob/uriparser-1.0.0/ChangeLog http://www.openwall.com/lists/oss-security/2025/12/15/1

CVSS ScoreMedium

5.1

Ecosystem	Package	Version


cocoapods	UriParser	0.1.0
conda	main/uriparser	0.9.3
conda	main/uriparser	0.9.7
conda	main/uriparser	0.9.8
cocoapods	uriparser	0.7.7
conan	uriparser	0.9.3
conan	uriparser	0.9.4
conan	uriparser	0.9.5
conan	uriparser	0.9.6
conan	uriparser	0.9.7
conan	uriparser	0.9.8
nuget	uriparser	0.8.4
rpm	uriparser	0.7.1-6.el5
rpm	uriparser	0.9.3-2.el8
rpm	uriparser	0.9.3-2.epel8.playground
rpm	uriparser	0.9.6-5.el9
rpm	uriparser	0.9.7-1.el8
rpm	uriparser	0.9.7-1.el9
rpm	uriparser	0.9.8-2.el10_0
rpm	uriparser	0.9.8-2.el10_1
rpm	uriparser	0.9.8-2.el8
rpm	uriparser	0.9.8-2.el9
rpm	uriparser	0.7.5-10.el7
rpm	uriparser	0.7.5-9.el7
cargo	uriparser-sys	0.1.0

CVE-2025-67899 | Components Impacted | Sonatype Guide | Sonatype Guide