CVE-2026-18446 vulnerabilities

Vulnerabilities for packages: gemini-cli, serve, opensearch-dashboards, gitlab-rails-ce-fips, langfuse, unleash-proxy, yaml-language-server, arangodb, gitlab-rails-ce, argo-workflows, renovate, librechat, vitess, langfuse-fips, saf, opensearch-dashboards-fips, nextcloud-server, prism...

CVE-2026-18446 vulnerabilities

Vulnerabilities for packages: vitess, opensearch-dashboards, langfuse, serve, saf, prism, argo-workflows, renovate, yaml-language-server...

CVE-2026-18446

fast-uri before 4.1.2, 3.1.5, and 2.4.4 requires a literal double forward slash to recognize a URI authority, so a reference that uses a backslash based introducer in place of it backslash backslash, forward slash backslash, or backslash forward slash is parsed with no authority and folds into th...