Skip to content
Openjsf Fast-uri vulnerabilities
-
fast-uri
fast-uri vulnerable to host confusion via an unclosed bracket in the URI authority
CVE-2026-84394
Fix available
7.5 High
-
fast-uri
fast-uri vulnerable to authority injection via an unvalidated port in serialize
CVE-2026-84292
Fix available
7.5 High
-
fast-uri
fast-uri vulnerable to host confusion via percent-encoded scheme normalization
CVE-2026-76172
Fix available
7.5 High
-
fast-uri
fast-uri vulnerable to server-side request forgery via malformed IPv6 normalization
CVE-2026-75975
Fix available
7.5 High
-
fast-uri
fast-uri vulnerable to host confusion via skipped IDN canonicalization on scheme-relative references
CVE-2026-75931
Fix available
7.5 High
-
fast-uri
fast-uri vulnerable to server-side request forgery via repeated hostname percent-decoding
CVE-2026-75899
Fix available
7.5 High
-
fast-uri
fast-uri vulnerable to host confusion via backslash authority introducer
CVE-2026-18446
Fix available
7.5 High
-
fast-uri
fast-uri vulnerable to host confusion via literal backslash authority delimiter
CVE-2026-16221
Fix available
7.5 High
-
fast-uri, red hat cluster observability operator 1.5.0, confidential compute attestation +49 more +51 more
fast-uri vulnerable to host confusion via failed IDN canonicalization
CVE-2026-13676
Fix available
7.5 High
-
fast-uri, red hat cluster observability operator 1.5.0, confidential compute attestation +53 more +55 more
fast-uri vulnerable to host confusion via percent-encoded authority delimiters
CVE-2026-6322
Fix available
7.5 High
-
fast-uri, red hat cluster observability operator 1.5.0, confidential compute attestation +32 more +34 more
fast-uri vulnerable to path traversal via percent-encoded dot segments
CVE-2026-6321
Fix available
7.5 High