What’s Vulnerable › Products
fast-uri vulnerabilities
17 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 17 published in the last 12 months.
Check whether your fast-uri version is affected
Latest fast-uri vulnerabilities
- CVE-2026-110725 — fast-uri vulnerable to scheme injection via an unescaped first-segment colon in suffix references (CVSS 3.7)
- CVE-2026-110306 — fast-uri vulnerable to URI scheme spoofing via percent-encoded scheme decoding (CVSS 6.1)
- CVE-2026-110180 — fast-uri vulnerable to host confusion via unchecked WHATWG host canonicalization (CVSS 4.8)
- CVE-2026-110095 — fast-uri vulnerable to improper path equivalence in relative reference normalization (CVSS 3.7)
- CVE-2026-86818 — fast-uri vulnerable to mailto header injection via percent-encoded field-name desynchronization (CVSS 4.8)
- CVE-2026-86472 — fast-uri vulnerable to inconsistent host case normalization via percent-encoded octets (CVSS 4.8)
- CVE-2026-84394 — fast-uri vulnerable to host confusion via an unclosed bracket in the URI authority (CVSS 7.5)
- CVE-2026-84292 — fast-uri vulnerable to authority injection via an unvalidated port in serialize (CVSS 7.5)
- CVE-2026-76172 — fast-uri vulnerable to host confusion via percent-encoded scheme normalization (CVSS 7.5)
- CVE-2026-75975 — fast-uri vulnerable to server-side request forgery via malformed IPv6 normalization (CVSS 7.5)
- CVE-2026-75931 — fast-uri vulnerable to host confusion via skipped IDN canonicalization on scheme-relative references (CVSS 7.5)
- CVE-2026-75899 — fast-uri vulnerable to server-side request forgery via repeated hostname percent-decoding (CVSS 7.5)
- CVE-2026-18446 — fast-uri vulnerable to host confusion via backslash authority introducer (CVSS 7.5)
- CVE-2026-16221 — fast-uri vulnerable to host confusion via literal backslash authority delimiter (CVSS 7.5)
- CVE-2026-13676 — fast-uri vulnerable to host confusion via failed IDN canonicalization (CVSS 7.5)
- CVE-2026-6322 — fast-uri vulnerable to host confusion via percent-encoded authority delimiters (CVSS 7.5)
- CVE-2026-6321 — fast-uri vulnerable to path traversal via percent-encoded dot segments (CVSS 7.5)