Fast-uri vulnerabilities

Products

• Fast-uri 17

Newest

• fast-uri fast-uri vulnerable to scheme injection via an unescaped first-segment colon in suffix references CVE-2026-110725 Fix available 3.7 LowOctober 20, 2026
• fast-uri fast-uri vulnerable to URI scheme spoofing via percent-encoded scheme decoding CVE-2026-110306 Fix available 6.1 MediumOctober 20, 2026
• fast-uri fast-uri vulnerable to host confusion via unchecked WHATWG host canonicalization CVE-2026-110180 Fix available 4.8 MediumOctober 20, 2026
• fast-uri fast-uri vulnerable to improper path equivalence in relative reference normalization CVE-2026-110095 Fix available 3.7 LowOctober 20, 2026
• fast-uri fast-uri vulnerable to mailto header injection via percent-encoded field-name desynchronization CVE-2026-86818 Fix available 4.8 MediumSeptember 15, 2026
• fast-uri fast-uri vulnerable to inconsistent host case normalization via percent-encoded octets CVE-2026-86472 Fix available 4.8 MediumSeptember 15, 2026
• fast-uri fast-uri vulnerable to host confusion via an unclosed bracket in the URI authority CVE-2026-84394 Fix available 7.5 HighSeptember 2, 2026
• fast-uri fast-uri vulnerable to authority injection via an unvalidated port in serialize CVE-2026-84292 Fix available 7.5 HighSeptember 2, 2026
• fast-uri fast-uri vulnerable to host confusion via percent-encoded scheme normalization CVE-2026-76172 Fix available 7.5 HighAugust 4, 2026
• fast-uri fast-uri vulnerable to server-side request forgery via malformed IPv6 normalization CVE-2026-75975 Fix available 7.5 HighAugust 4, 2026
• fast-uri fast-uri vulnerable to host confusion via skipped IDN canonicalization on scheme-relative references CVE-2026-75931 Fix available 7.5 HighAugust 4, 2026
• fast-uri fast-uri vulnerable to server-side request forgery via repeated hostname percent-decoding CVE-2026-75899 Fix available 7.5 HighAugust 4, 2026
• fast-uri fast-uri vulnerable to host confusion via backslash authority introducer CVE-2026-18446 Fix available 7.5 HighJuly 31, 2026
• fast-uri fast-uri vulnerable to host confusion via literal backslash authority delimiter CVE-2026-16221 Fix available 7.5 HighJuly 19, 2026
• fast-uri, red hat cluster observability operator 1.5.0, confidential compute attestation +49 more +51 more fast-uri vulnerable to host confusion via failed IDN canonicalization CVE-2026-13676 Fix available 7.5 HighJune 29, 2026
• fast-uri, red hat cluster observability operator 1.5.0, confidential compute attestation +53 more +55 more fast-uri vulnerable to host confusion via percent-encoded authority delimiters CVE-2026-6322 Fix available 7.5 HighJune 5, 2019
• fast-uri, red hat cluster observability operator 1.5.0, confidential compute attestation +32 more +34 more fast-uri vulnerable to path traversal via percent-encoded dot segments CVE-2026-6321 Fix available 7.5 HighJune 5, 2019