Lucene search
+L

14 matches found

Github Security Blog
Github Security Blog
•added 2026/08/03 7:16 p.m.•19 views

fast-uri vulnerable to host confusion via backslash authority introducer

Impact fast-uri v4.1.1 and earlier require a literal // to recognize a URI authority, so a reference that uses \, /, or / as the authority introducer in place of //, after an optional scheme is parsed with no authority: the sequence and everything after it fold into the path. Node's native...

7.5CVSS6.7AI score0.00221EPSS
SaveExploits0References6Affected Software1
Rows per page
Query Builder