CVE-2026-18446 vulnerabilities

Vulnerabilities for packages: yaml-language-server, gemini-cli, vitess, unleash-proxy, librechat, argo-workflows, arangodb, langfuse-fips, serve, prism, opensearch-dashboards-fips, opensearch-dashboards, nextcloud-server...

CVE-2026-18446 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards, argo-workflows, vitess, yaml-language-server, serve, prism...

CVE-2026-18446

fast-uri before 4.1.2, 3.1.5, and 2.4.4 requires a literal double forward slash to recognize a URI authority, so a reference that uses a backslash based introducer in place of it backslash backslash, forward slash backslash, or backslash forward slash is parsed with no authority and folds into th...