lambdaisland/uri vulnerabilities

Latest lambdaisland/uri CVEs

Newest publication first

1. CVE-2023-28628 `authority-regex` returns the wrong authority in lambdaisland/uri

   Published 2023-03-27

   Medium·CVSS 6.1

   lambdaisland/uri is a pure Clojure/ClojureScript URI library. In versions prior to 1.14.120 authority-regex allows an attacker to send malicious URLs to be parsed by the lambdaisland/uri and return the wrong authority. This issue is similar to but distinct from CVE-2020-8910. The...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.