ROOT-APP-NPM-CVE-2026-13676 CVE-2026-13676 in fast-uri - Patched by Root

🗓️ 31 Aug 2026 11:02:12Reported by GoogleType

osv🔗 osv.dev👁 13 Views

Root patched CVE-2026-13676 in @rootio/fast-uri for Root npm; multiple fixed versions available.

Reporter	Title	Published	Views	Family All 126
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Aspera Faspex	20 Jul 202615:47	–	ibm
IBM Security Bulletins	Security Bulletin:Multiple security vulnerabilities in IBM Process Automation Manager Open Edition Starter Kit for Banking	10 Aug 202609:53	–	ibm
IBM Security Bulletins	Security Bulletin: MongoDB Enterprised Advanced affected by: Interpretation Conflict (CVE-2026-13676)	3 Sep 202619:07	–	ibm
IBM Security Bulletins	Security Bulletin: Platform Navigator and Automation Assets in IBM Cloud Pak for Integration are vulnerable to multiple vulnerabilitie	24 Jul 202615:43	–	ibm
IBM Security Bulletins	Security Bulletin: There are vulnerabilities in jackson-databind-2.18.6.jar, protobufjs-8.3.0.tgz and fast-uri-3.1.2.tgz used by IBM Maximo Manage application in IBM Maximo Application Suite which are affected by multiple CVEs	3 Aug 202608:19	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities affect IBM Decision Optimization for Cloud Pak for Data.	3 Sep 202616:23	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Bob Premium Package for i is affected by multiple vulnerabilities	7 Aug 202600:16	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Data Product Hub	7 Aug 202616:35	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in fast-ur affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge.	25 Aug 202618:10	–	ibm
ATTACKERKB	CVE-2026-13676	29 Jun 202613:22	–	attackerkb

31 Aug 2026 13:30Current

6.3Medium risk

Vulners AI Score6.3

CVSS 3.17.5

EPSS0.00384

SSVC

root patched fast uri root npm vulnerability 2026