CVE-2025-67899
uriparser through 0.9.9 allows unbounded recursion and stack consumption, as demonstrated by ParseMustBeSegmentNzNc with large input containing many commas.
Published Dec 14, 2025 · updated Oct 14, 2026
uriparser through 0.9.9 allows unbounded recursion and stack consumption, as demonstrated by ParseMustBeSegmentNzNc with large input containing many commas.
Timeline
Detection, updates, and resolution for this record.
Dec 14, 2025 · NIST NVD
Detected
uriparser through 0.9.9 allows unbounded recursion and stack consumption, as demonstrated by ParseMustBeSegmentNzNc with large input containing many commas.
Oct 14, 2026 · NIST NVD
Updated
uriparser through 0.9.9 allows unbounded recursion and stack consumption, as demonstrated by ParseMustBeSegmentNzNc with large input containing many commas.
Sources
- CVE.orgCVE-2025-67899
Official CVE identifier
cve.org - FIRST EPSSCVE-2025-67899
30-day exploitation probability 0.1%
first.org - NIST NVDCVE-2025-67899
uriparser through 0.9.9 allows unbounded recursion and stack consumption, as demonstrated by ParseMustBeSegmentNzNc with large input containing many commas.
nvd.nist.gov