Fast-uri Vulnerable To Host Confusion Via Unchecked WHATWG Host Canonicalization

Impact "fast-uri" versions "= 2.4.2, = 3.1.3, = 4.0.1, = 4.2.2" can silently rewrite the host of an HTTP-family URL "http", "https", "ws", "wss", or any scheme with "domainHost: true". For those schemes "canonicalizeHost" passes the parsed host to the WHATWG "URL" parser and adopts its ".hostname...