5519 matches found
npm: fast-uri vulnerable to host confusion via unchecked WHATWG host canonicalization
npm: fast-uri vulnerable to host confusion via unchecked WHATWG host canonicalization vulnerability discovered by ? in WordPress npm fast-uri versions = 2.4.2, 2.4.8...
EUVD-2026-104807
fast-uri vulnerable to scheme injection via an unescaped first-segment colon in suffix references...
fast-uri vulnerable to scheme injection via an unescaped first-segment colon in suffix references
Impact fast-uri's serialize, normalize, and resolve, when called with the non-default option reference: 'suffix' on a reference that has no authority, emit a relative reference whose first path segment contains a bare colon without escaping it. RFC 3986 section 3.3 requires the first segment of a...
GHSA-333X-W4R6-6CRP fast-uri vulnerable to scheme injection via an unescaped first-segment colon in suffix references
Impact fast-uri's serialize, normalize, and resolve, when called with the non-default option reference: 'suffix' on a reference that has no authority, emit a relative reference whose first path segment contains a bare colon without escaping it. RFC 3986 section 3.3 requires the first segment of a...
npm: fast-uri vulnerable to scheme injection via an unescaped first-segment colon in suffix references
npm: fast-uri vulnerable to scheme injection via an unescaped first-segment colon in suffix references vulnerability discovered by ? in WordPress npm fast-uri versions 2.4.8...
CVE-2023-50257
ROS2 CVE-2023-50257 Reproduction 🔍 Overview This repository is based on a PoC for CVE-2023-50257 and automates the collection of RTPS packets, parses GUID values, and sends a successful DoS packet. CVE-2023-50257 is a known security vulnerability in ROS2 Robot Operating System 2...
CVE-2026-98761
A flaw was found in the Linux kernel's USB Type-C Port Manager TCPM. This issue may result in a denial of service DoS or unintended power delivery on the affected port. When a USB Type-C cable is disconnected while signaling a Fast Role Swap FRS, the controller autonomously begins sourcing bus...
columbus-server
Columbus server This repository is deprecated! ‼️ The server component is moved to https://github.com/elmasy-com/columbus. Columbus Project is an API first subdomain discovery service, blazingly fast subdomain enumeration service with advanced features. Subdomain Lookup Columbus returned 638...
UBUNTU-CVE-2026-110095
fast-uri is a dependency-free RFC 3986 URI parser and serializer for N...
CVE-2026-110095
fast-uri is a dependency-free RFC 3986 URI parser and serializer for N...
CVE-2026-86472
fast-uri is a dependency-free RFC 3986 URI parser for Node.js, used by...
Security Bulletin: Multiple Vulnerabilities in IBM Data Product Hub
Summary Multiple vulnerabilities were addressed in IBM Data Product Hub version 5.4.0 Patch 8 Vulnerability Details CVEID:CVE-2026-75899 DESCRIPTION: fast-uri is a URI parser for Node.js. It decodes percent escapes in a hostname during parsing and then decodes the parsed hostname a second time...
CLSA-2026-1792574767 TuxCare security update for fast-uri (1 CVE)
TuxCare rebuilt fast-uri to address 1 CVE. Fixed in 3.1.2-tuxcare.6...
SUSE CVE-2026-110095
fast-uri is a dependency-free RFC 3986 URI parser and serializer for Node.js. In versions before 2.4.8, from 3.0.0 through 3.1.8, and from 4.0.0 through 4.2.2, the normalize and serialize functions apply RFC 3986 dot-segment removal to the path of a relative-path reference, even though that...
SUSE CVE-2026-110180
fast-uri is a dependency-free RFC 3986 URI parser and serializer for Node.js. In versions from 2.4.2 through 2.4.7, from 3.1.3 through 3.1.8, and from 4.0.1 through 4.2.2, for HTTP-family schemes the canonicalizeHost function passes the parsed host to the WHATWG URL parser and adopts its hostname...
SUSE CVE-2026-110306
fast-uri is a dependency-free RFC 3986 URI parser and serializer for Node.js. In versions before 2.4.8, from 3.0.0 through 3.1.8, and from 4.0.0 through 4.2.2, fast-uri percent-decodes the scheme component with the legacy global unescape function before validating it, so an input whose decoded...
SUSE CVE-2026-110725
fast-uri is a dependency-free RFC 3986 URI parser and serializer for Node.js. In versions before 2.4.8, from 3.0.0 through 3.1.8, and from 4.0.0 through 4.2.2, when serialize, normalize, or resolve are called with the non-default option reference set to suffix on a reference that has no authority...
CLSA-2026-1792523667 TuxCare security update for fast-uri (1 CVE)
TuxCare rebuilt fast-uri to address 1 CVE. Fixed in 3.1.3-tuxcare.7...