CVE-2026-18446 vulnerabilities

Vulnerabilities for packages: langfuse-fips, argo-workflows, langfuse, vitess, opensearch-dashboards, renovate, saf, opensearch-dashboards-fips, jupyter-base-notebook, serve, yaml-language-server, gitlab-rails-ce, arangodb, gemini-cli, nextcloud-server, unleash-proxy,...

CVE-2026-18446 vulnerabilities

Vulnerabilities for packages: serve, jupyter-base-notebook, prism, argo-workflows, vitess, yaml-language-server, renovate, saf, opensearch-dashboards, langfuse...

CVE-2026-18446

fast-uri before 4.1.2, 3.1.5, and 2.4.4 requires a literal double forward slash to recognize a URI authority, so a reference that uses a backslash based introducer in place of it backslash backslash, forward slash backslash, or backslash forward slash is parsed with no authority and folds into th...