OSV security advisoryHigh
High advisory for decode-uri-component
ROOT-APP-NPM-CVE-2026-118664 · Reported 3 Nov 2026
Full advisory details, affected packages, severity context, and original source.
Affected technology
decode-uri-componentAffected product
Advisory overview
Root has patched CVE-2026-118664 in the decode-uri-component package for Root:npm. Multiple fixed versions available.
Affected packages and releases
Root:npm / decode-uri-component
introduced: 0 · fixed: 0.2.2-aikido.1
Root:npm / @rootio/decode-uri-component
introduced: 0 · fixed: 0.2.2-root.io.1
