435 matches found
CLSA-2026-1790941624 TuxCare security update for fast-uri (1 CVE)
TuxCare rebuilt fast-uri to address 1 CVE. Fixed in 3.1.4-tuxcare.4...
CLSA-2026-1790876894 TuxCare security update for fast-uri (3 CVEs)
TuxCare rebuilt fast-uri to address 3 CVEs. Fixed in 3.1.2-tuxcare.2...
CLSA-2026-1790870000 TuxCare security update for fast-uri (1 CVE)
TuxCare rebuilt fast-uri to address 1 CVE. Fixed in 3.1.3-tuxcare.3...
fast-uri: fast-uri: Host confusion via skipped IDN canonicalization
A flaw was found in fast-uri, a URI parser for Node.js. This vulnerability arises because the parser fails to consistently convert internationalized domain names IDN to their standard ASCII form when processing scheme-relative references. This inconsistency can lead to host confusion, where an...
fast-uri: fast-uri: Host confusion via unbalanced URI brackets can bypass security policies
A flaw was found in fast-uri. The library incorrectly processes Uniform Resource Identifier URI hosts containing unbalanced brackets, leading to a discrepancy in how the host is parsed by fast-uri compared to other HTTP clients. This host confusion can allow an attacker to bypass security policie...
fast-uri: fast-uri: Server-side request forgery via malformed IPv6 normalization
A flaw was found in fast-uri, a URI parser for Node.js. Its custom parser for bracketed IPv6 literals does not fully validate the IPv6 grammar, allowing invalid trailing text in an authority to be silently discarded. This can lead to a malformed, attacker-controlled host being normalized into a...
fast-uri: fast-uri: Authority Injection via Unvalidated Port Serialization
A flaw was found in fast-uri. This component improperly serializes the port component of a Uniform Resource Identifier URI without validating its content. A remote attacker can exploit this by crafting a malicious port value that injects authority delimiters. This manipulation can demote the...
fast-uri: fast-uri: Server-Side Request Forgery via repeated hostname percent-decoding
A flaw was found in fast-uri, a URI parser for Node.js. The component incorrectly decodes percent escapes in a hostname twice during URI parsing and authority recomposition. This double decoding can allow a remote attacker to manipulate a URI to point to a different network destination, such as a...
CLSA-2026-1790864817 TuxCare security update for fast-uri (1 CVE)
TuxCare rebuilt fast-uri to address 1 CVE. Fixed in 3.1.5-tuxcare.3...
CLSA-2026-1790863104 TuxCare security update for fast-uri (2 CVEs)
TuxCare rebuilt fast-uri to address 2 CVEs. Fixed in 3.1.3-tuxcare.2...
CLSA-2026-1790863075 TuxCare security update for fast-uri (1 CVE)
TuxCare rebuilt fast-uri to address 1 CVE. Fixed in 2.4.2-tuxcare.4...
CLSA-2026-1790862941 TuxCare security update for fast-uri (3 CVEs)
TuxCare rebuilt fast-uri to address 3 CVEs. Fixed in 3.1.5-tuxcare.2...
CLSA-2026-1790856985 TuxCare security update for fast-uri (2 CVEs)
TuxCare rebuilt fast-uri to address 2 CVEs. Fixed in 3.1.2-tuxcare.1...
CLSA-2026-1790856982 TuxCare security update for fast-uri (1 CVE)
TuxCare rebuilt fast-uri to address 1 CVE. Fixed in 3.1.6-tuxcare.1...
CLSA-2026-1790856979 TuxCare security update for fast-uri (1 CVE)
TuxCare rebuilt fast-uri to address 1 CVE. Fixed in 2.4.3-tuxcare.4...
CLSA-2026-1790854678 TuxCare security update for fast-uri (1 CVE)
TuxCare rebuilt fast-uri to address 1 CVE. Fixed in 3.1.5-tuxcare.1...
CLSA-2026-1790854674 TuxCare security update for fast-uri (1 CVE)
TuxCare rebuilt fast-uri to address 1 CVE. Fixed in 3.1.7-tuxcare.1...
CLSA-2026-1790854665 TuxCare security update for fast-uri (1 CVE)
TuxCare rebuilt fast-uri to address 1 CVE. Fixed in 3.1.0-tuxcare.1...