decode-uri-component vulnerabilities (Root)

2 vulnerabilities.

• decode-uri-component Root decode-uri-component: Denial of service via quadratic replacement of percent-encoded runs CVE-2026-118664 Fix available 8.2 HighOctober 28, 2026
• decode-uri-component Root decode-uri-component vulnerable to Denial of Service (DoS) CVE-2022-38900 Fix available EPSS 23.6% 7.5 HighNovember 28, 2022