CVE-2026-103387

Name of the Vulnerable Software and Affected Versions garycourt uri-js versions prior to 4.4.2

Description A weakness in the Mailto Header Handler component allows a remote attacker to cause an uncaught exception. This occurs through the manipulation of arguments passed to the URI.parse() function within the src/schemes/mailto.ts file.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.