CVE-2026-44928CWE-670

In uriparser before 1.0.2, the function family EqualsUri can misclassify two unequal URIs as equal

Low · published May 8, 2026

CVSS v3.1
2.9
EPSS
0%
Percentile
13.2
In the wild
Unconfirmed
What it is

In uriparser before 1.0.2, the function family EqualsUri can misclassify two unequal URIs as equal.

The record
Technical detail
CVSS v3.1
2.9 · LOW
Vector
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00231 · 13.2th percentile
Weakness
CWE-670 · Always-Incorrect Control Flow Implementation
Published
2026-05-08T07:15Z
EPSS history
Timeline
  • 08 MAY 07:15Z
    In uriparser before 1.0.2, the function family EqualsUri can misclassify two unequal URIs as equal
    cvelistv5