CVE-2026-18446 vulnerabilities

Vulnerabilities for packages: langfuse, unleash-proxy, gitlab-rails-ce, saf, yaml-language-server, argo-workflows, gemini-cli, opensearch-dashboards-fips, prism, opensearch-dashboards, renovate, vitess, librechat, serve, nextcloud-server, gitlab-rails-ce-fips, arangodb, langfuse-fips...

CVE-2026-18446 vulnerabilities

Vulnerabilities for packages: argo-workflows, opensearch-dashboards, renovate, yaml-language-server, prism, saf, vitess, serve, langfuse...

CVE-2026-18446

fast-uri before 4.1.2, 3.1.5, and 2.4.4 requires a literal double forward slash to recognize a URI authority, so a reference that uses a backslash based introducer in place of it backslash backslash, forward slash backslash, or backslash forward slash is parsed with no authority and folds into th...