decode-uri-component vulnerable to Denial of Service (DoS)

Description

decode-uri-component 0.2.0 is vulnerable to Improper Input Validation resulting in DoS.

Recommendation

Update the decode-uri-component package to the latest compatible version. Followings are version details:

Affected version(s): < 0.2.1
Patched version(s): 0.2.1

References

GHSA-w573-4hg7-7wgq
lists.fedoraproject.org
CVE-2022-38900
CWE-20
CAPEC-310
OWASP 2021-A3
OWASP 2021-A6

Could your website be exposed too?

SmartScanner can check your website for decode-uri-component vulnerable to Denial of Service (DoS) and gives you actionable findings to investigate.

Start a free scan

Related Issues

Cube Core is vulnerable to Denial of Service (DoS) via crafted request - CVE-2026-25957
jsPDF Vulnerable to Denial of Service (DoS) via Unvalidated BMP Dimensions in BMPDecoder - CVE-2026-24133
steal vulnerable to Regular Expression Denial of Service via input variable - CVE-2022-37260
steal vulnerable to Regular Expression Denial of Service via source and sourceWithComments - CVE-2022-37262

CSRF, XXE, and 12 Other Security Acronyms Explained

10 Secure Coding Best Practices to Follow in Every Project

Update Cheat Sheet for Developers

See something that needs correcting? Let us knowUpdated September 21, 2023