PatchTheCVEuriparser vulnerabilities and fixes
Recent CVEs affecting uriparser, with upgrade or downgrade steps. 2 tracked.
uriparser has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2026-05-08. Highest priority: CVE-2026-44928 (score 13/100).
- CVE-2026-44928 LOW 2.9 UPGRADE In uriparser before 1.0.2, the function family EqualsUri can misclassify two unequal URIs as equal.
- CVE-2026-44927 LOW 2.9 UPGRADE In uriparser before 1.0.2, there is pointer difference truncation to int in various places.
FAQ
How do I fix uriparser vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is uriparser being exploited right now?
None of the tracked uriparser CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which uriparser CVE should I patch first?
CVE-2026-44928 currently ranks highest (13/100): In uriparser before 1.0.2, the function family EqualsUri can misclassify two unequal URIs as equal..