AZL-92075
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-92075.json
- JSON Data
- https://api.osv.dev/v1/vulns/AZL-92075
- Upstream
- Published
- 2026-06-30T09:16:25Z
- Modified
- 2026-08-29T05:25:22Z
- Summary
- CVE-2026-45822 affecting package js-jquery 3.5.0-4
- Details
-
decode-uri-component through 0.4.1 is vulnerable to denial of service. The decode() function splits input on '%' producing N tokens and calls decodeComponents(), exhibiting super-linear parsing time: 200 '%ab' tokens takes approximately 0.7s, 700 tokens approximately 6s, and 1400 tokens approximately 33s. An attacker can cause significant CPU consumption and event-loop blocking via crafted input.
- References