Injection fast-uri Dependency in Bamboo Data Center

🗓️ 07 Aug 2026 16:31:37Reported by security-metrics-botType

Unauthenticated injection in Bamboo Data Center via vulnerable fast-uri library enabling SSRF and integrity impact.

Reporter	Title	Published	Views	Family All 356
IBM Security Bulletins	Security Bulletin: Security vulnerability has been found in IBM Verify Identity Access Digital Credentials (CVE-2026-16221)	13 Aug 202607:30	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Certified Container operator and operands are vulnerable to loss of confidentiality and denial of service due to multiple CVEs	12 Aug 202613:52	–	ibm
IBM Security Bulletins	Security Bulletin: fast-uri versions from 2.3.1 through 4.1.0 (including the 3.x line up to 3.1.3 and the 2.x line up to 2.4.2) do not treat a literal backslash character (U+005C) as an authority delimiter	9 Sep 202620:14	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Informix HQ is affected by multiple vulnerabilities in third-party libraries.	9 Sep 202621:14	–	ibm
IBM Security Bulletins	Security Bulletin: There are vulnerabilities in IBM Maximo Manage application in IBM Maximo Application Suite	28 Aug 202605:59	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Aspera Faspex	11 Aug 202618:25	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise is vulnerable to an Interpretation Conflict due to Node.js module fast-uri (CVE-2026-16221)	31 Aug 202608:46	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities found in Watson Data Intelligence	9 Sep 202617:45	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in fast-uri affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge.	25 Aug 202618:05	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities found in IBM DataPower Interact Gateway 12.1.1.1	2 Sep 202613:38	–	ibm