Fast Uri
Openjsf · 11 CVEs
fast-uri vulnerable to host confusion via an unclosed bracket in the URI authority
Sep 2, 2026
fast-uri vulnerable to authority injection via an unvalidated port in serialize
Sep 2, 2026
fast-uri vulnerable to host confusion via percent-encoded scheme normalization
Aug 24, 2026
fast-uri vulnerable to server-side request forgery via malformed IPv6 normalization
Aug 24, 2026
fast-uri vulnerable to server-side request forgery via repeated hostname percent-decoding
Aug 24, 2026
fast-uri vulnerable to host confusion via skipped IDN canonicalization on scheme-relative references
Aug 24, 2026
fast-uri vulnerable to host confusion via backslash authority introducer
Jul 31, 2026
fast-uri vulnerable to host confusion via literal backslash authority delimiter
Jul 19, 2026
fast-uri vulnerable to host confusion via failed IDN canonicalization
Jun 29, 2026
fast-uri vulnerable to host confusion via percent-encoded authority delimiters
May 5, 2026
fast-uri vulnerable to path traversal via percent-encoded dot segments
May 4, 2026
| CVE ID | Description | Severity | EPSS | Published |
|---|---|---|---|---|
| CVE-2026-84394 | fast-uri vulnerable to host confusion via an unclosed bracket in the URI authority | HIGH | 0.38% | Sep 2, 2026 |
| CVE-2026-84292 | fast-uri vulnerable to authority injection via an unvalidated port in serialize | HIGH | 0.24% | Sep 2, 2026 |
| CVE-2026-76172 | fast-uri vulnerable to host confusion via percent-encoded scheme normalization | HIGH | 0.23% | Aug 24, 2026 |
| CVE-2026-75975 | fast-uri vulnerable to server-side request forgery via malformed IPv6 normalization | HIGH | 0.22% | Aug 24, 2026 |
| CVE-2026-75899 | fast-uri vulnerable to server-side request forgery via repeated hostname percent-decoding | HIGH | 0.22% | Aug 24, 2026 |
| CVE-2026-75931 | fast-uri vulnerable to host confusion via skipped IDN canonicalization on scheme-relative references | HIGH | 0.40% | Aug 24, 2026 |
| CVE-2026-18446 | fast-uri vulnerable to host confusion via backslash authority introducer | HIGH | 0.22% | Jul 31, 2026 |
| CVE-2026-16221 | fast-uri vulnerable to host confusion via literal backslash authority delimiter | HIGH | 0.25% | Jul 19, 2026 |
| CVE-2026-13676 | fast-uri vulnerable to host confusion via failed IDN canonicalization | HIGH | 0.48% | Jun 29, 2026 |
| CVE-2026-6322 | fast-uri vulnerable to host confusion via percent-encoded authority delimiters | HIGH | 0.68% | May 5, 2026 |
| CVE-2026-6321 | fast-uri vulnerable to path traversal via percent-encoded dot segments | HIGH | 0.77% | May 4, 2026 |
Showing 1 to 11 of 11 CVEs