@activepieces/piece-ai (>=0.3.1, <=0.3.4), @middy/validator (>=5.4.3, <=5.4.4) +4 more potentially affected by CVE-2026-6322 via fast-uri (>=3.0.1, <=3.1.0)

🗓️ 05 May 2026 12:26:49Reported by Vulners OSVType

vulnersosv

vulnersosv🔗 security.snyk.io👁 4 Views

fast-uri versions 3.0.1 to 3.1.0 vulnerable to CVE-2026-6322, affecting six dependent packages.

Reporter	Title	Published	Views	Family All 129
IBM Security Bulletins	Security Bulletin: Vulnerabilities in axios, follow-redirects, fast-uri and babel might affect IBM Storage Defender Sentinel Anomaly Scan Engine.	27 Jun 202615:52	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Aspera Faspex	16 Jun 202616:51	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Event Endpoint Management is affected by multiple vulnerabilities.	22 Jul 202613:56	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Observability with Instana (OnPrem)	22 Jul 202617:41	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities exists in IBM Netezza Software	13 Aug 202606:21	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Certified Container operator and operands are vulnerable to loss of confidentiality and denial of service due to multiple CVEs	1 Jun 202609:22	–	ibm
IBM Security Bulletins	Security Bulletin: MongoDB Enterprised Advanced affected by: Interpretation Conflict (CVE-2026-6322)	30 Jul 202615:26	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise is vulnerable to multiple vulnerabilities due to Node.js modules fast-uri and protobufjs (CVE-2026-6322, CVE-2026-45740 & CVE-2026-6321)	16 Jun 202610:55	–	ibm
ATTACKERKB	CVE-2026-6322	5 May 202610:29	–	attackerkb
Atlassian	Injection fast-uri Dependency in Bamboo Data Center	7 Aug 202616:32	–	atlassian

05 May 2026 12:26Current

6.5Medium risk

Vulners AI Score6.5

CVSS 3.17.5

EPSS0.00475

SSVC

fast-uri CVE-2026-6322 transitive dependency npm package URI parsing vulnerable range dependency chain