CVE-2026-103387 | garycourt uri-js up to 4.4.1 Mailto Header src/schemes/mailto.ts URI.parse uncaught exception (Issue 103)

September 30, 2026 Yanac

A vulnerability was found in garycourt uri-js up to 4.4.1. It has been classified as problematic. This affects the function URI.parse of the file src/schemes/mailto.ts of the component Mailto Header Handler. This manipulation of the argument to causes uncaught exception.

This vulnerability appears as CVE-2026-103387. The attack may be initiated remotely. In addition, an exploit is available.

The project was informed of the problem early through an issue report but has not responded yet.VulDB Recent EntriesRead More