uri-js vulnerabilities

1 known vulnerability in uri-js from Garycourt. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  uri-js: Loop with Unreachable Exit Condition

  CVE-2026-93690Sep 18, 2026Garycourt

  uri-js through 4.4.1 contains a denial of service vulnerability in the removeDotSegments function that loops infinitely when a path segment begins with Unicode line or paragraph separators. Attackers can trigger this by calling removeDotSegments directly or th