GHSA-XHQ7-XMQJ-769H fast-uri vulnerable to improper path equivalence in relative reference normalization

Impact fast-uri's normalize and serialize apply RFC 3986 dot-segment removal removedotsegments to the path of a relative-path reference. RFC 3986 section 5.2.4 defines that algorithm only for the merged target path during resolution, not for the reference itself, so applied to the reference it...

npm: fast-uri vulnerable to improper path equivalence in relative reference normalization

npm: fast-uri vulnerable to improper path equivalence in relative reference normalization vulnerability discovered by ? in WordPress npm fast-uri versions 2.4.8...