fast-uri vulnerable to host confusion via skipped IDN canonicalization on scheme-relative references

🗓️ 02 Sep 2026 15:44:30Reported by GitHub Advisory DatabaseType

Host confusion in fast-uri via skipped IDN canonicalization on scheme-relative references.

Reporter	Title	Published	Views	Family All 29
Chainguard	CVE-2026-75931 vulnerabilities	3 Sep 202614:18	–	cgr
Circl	CVE-2026-75931	24 Aug 202609:33	–	circl
CVE	CVE-2026-75931	24 Aug 202609:30	–	cve
Cvelist	CVE-2026-75931 fast-uri vulnerable to host confusion via skipped IDN canonicalization on scheme-relative references	24 Aug 202609:30	–	cvelist
Debian CVE	CVE-2026-75931	24 Aug 202609:30	–	debiancve
EUVD	EUVD-2026-64758	2 Sep 202615:44	–	euvd
NVD	CVE-2026-75931	24 Aug 202610:16	–	nvd
OSV	CGA-956Q-RJ3Q-C674	3 Sep 202608:05	–	osv
OSV	DEBIAN-CVE-2026-75931	24 Aug 202610:16	–	osv
OSV	GHSA-5JGF-P345-68V8 fast-uri vulnerable to host confusion via skipped IDN canonicalization on scheme-relative references	2 Sep 202615:44	–	osv

Vulners

Node

openjsf fast-uriRange4.0.1–4.1.3npm

openjsf fast-uriRange3.1.3–3.1.6npm

openjsf fast-uriRange2.4.2–2.4.5npm

Source	Link
github	www.github.com/fastify/fast-uri/security/advisories/GHSA-5jgf-p345-68v8
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-75931
github	www.github.com/fastify/fast-uri/commit/0256bc8d1f28b5d0ac657faf67e2411a189dfcb5
github	www.github.com/fastify/fast-uri/commit/444ecdad447db2cc23c4d422acc6f0daa6fa8eef
github	www.github.com/fastify/fast-uri/commit/4e4ebd8b245f6ca16e448203559eea3e545453a3
cna	www.cna.openjsf.org/security-advisories.html
github	www.github.com/fastify/fast-uri/releases/tag/v2.4.5
github	www.github.com/fastify/fast-uri/releases/tag/v3.1.6
github	www.github.com/fastify/fast-uri/releases/tag/v4.1.3
github	www.github.com/advisories/GHSA-5jgf-p345-68v8

02 Sep 2026 15:44Current

5.9Medium risk

Vulners AI Score5.9

CVSS 3.17.5

EPSS0.00247

SSVC