CVE Field Guide
About Us
CVE-2026-44928
PUBLISHED
Assigner:
mitre
Reserved:
08.05.2026
Published:
08.05.2026
Updated:
08.05.2026
In uriparser before 1.0.2, the function family EqualsUri can misclassify two unequal URIs as equal.
Metrics
CVSS 3.1
CVSS Vector:
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
CVSS Score:
2.9
CVSS score
2.9
Attack Vector
Local
Scope
Unchanged
Attack Complexity
High
Confidentiality Impact
None
Privileges Required
None
Integrity Impact
Low
User Interaction
None
Availability Impact
None
CVSS 3.1
Product Status
Vendor
uriparser
Product
uriparser
Versions
Default:
unaffected
affected from 0 to 1.0.2 (excl.)
References
https://github.com/uriparser/uriparser/pull/305
Problem Types
CWE-670 Always-Incorrect Control Flow Implementation
CWE