1 matches found
Fastify fast-uri input validation vulnerability
The Fastify fast-uri versions from 2.4.2 to 2.4.7, 3.1.3 to 3.1.8, and 4.0.1 to 4.2.2 have security vulnerabilities. These vulnerabilities stem from the canonicalizeHost function, which does not check whether the WHATWG URL parser treats the entire input as a host for host name consumption. As a...
4.8CVSS5.8AI score0.00208EPSS
SaveExploits0References2
20