Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
uriparser before 1.0.1 has numeric truncation in text range comparison, if an application accepts URIs with a length in gigabytes.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-04-27 | 2 | Disclosure1General1 |
| 2026-04-28 | 1 | Patch1 |
uriparser 1.0.1 fixes CVE-2026-42371 (integer overflow) https://www.openwall.com/lists/oss-security/2026/04/27/2
Post summary
uriparser 1.0.1 release includes a fix for CVE-2026-42371 (integer overflow); no exploit, PoC, or active exploitation information is provided.
CVE-2026-42371 uriparser before 1.0.1 has numeric truncation in text range comparison, if an application accepts URIs with a length in gigabytes. https://www.cve.org/CVERecord?id=CVE-2026-42371
Post summary
CVE-2026-42371 highlights a numeric truncation issue in uriparser prior to 1.0.1 that can be triggered with URIs of gigabyte‑sized length. The post cites the CVE record but offers no exploit, patch, or PoC.
CVE-2026-42371 Numeric Truncation Vulnerability in uriparser Before 1.0.1 Text R... https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-42371 Customizable Vulnerability Alerts: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=4
Post summary
The post briefly notes the existence of CVE-2026-42371 with the vulnerability type and affected library, providing links to further details but lacking any exploit, patch, or active exploitation information.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | uriparser_project | uriparser | - | - | - |