CVE-2026-18446 vulnerabilities

Vulnerabilities for packages: vitess, opensearch-dashboards, librechat, opensearch-dashboards-fips, gitlab-rails-ce-fips, prism, renovate, serve, arangodb, argo-workflows, gitlab-rails-ce, langfuse, nextcloud-server, unleash-proxy, saf, yaml-language-server, langfuse-fips, gemini-cli...

CVE-2026-18446 vulnerabilities

Vulnerabilities for packages: renovate, langfuse, vitess, yaml-language-server, opensearch-dashboards, prism, argo-workflows, saf, serve...

CVE-2026-18446

fast-uri before 4.1.2, 3.1.5, and 2.4.4 requires a literal double forward slash to recognize a URI authority, so a reference that uses a backslash based introducer in place of it backslash backslash, forward slash backslash, or backslash forward slash is parsed with no authority and folds into th...