Lucene search
+L

504 matches found

OSV
OSV
added 2 days ago6 views

GHSA-V2HH-GCRM-F6HX fast-uri vulnerable to host confusion via literal backslash authority delimiter

Impact fast-uri v4.1.0 and earlier do not treat a literal backslash U+005C as an authority delimiter. Node's native WHATWG URL used by fetch, undici, and Node's http/https clients normalizes \ to / for special schemes http, https, ws, wss, ftp, file, so the two parsers extract different hosts fro...

7.5CVSS5.3AI score0.00221EPSS
SaveExploits0References10
Rows per page
Query Builder