Lucene search
+L

16 matches found

Github Security Blog
Github Security Blog
added 2026/07/21 7:03 p.m.22 views

fast-uri vulnerable to host confusion via failed IDN canonicalization

Impact fast-uri versions = 2.3.1, = 4.0.0 fail to canonicalize Unicode/IDN hostnames for HTTP-family URLs. The IDN conversion path calls URL.domainToASCII... on the global WHATWG URL constructor, where that helper does not exist. The resulting TypeError is silently routed into parsed.error, but...

7.5CVSS6.5AI score0.00481EPSS
SaveExploits0References54Affected Software1
Rows per page
Query Builder