SamVerschueren
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| decode-uri-component | 2 | – | Oct 28, 2026 |
Exploited and recent CVEs
- CVE-2026-118664 decode-uri-component: Denial of service via quadratic replacement of percent-encoded runs 0.3%
- CVE-2026-45822 decode-uri-component through 0.4.1 is vulnerable to denial of service. The decode() function splits input on '%' producing N tokens and calls decodeComponents(), exhibiting super-linear parsing time: 0.5%