Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

fast-uri — Vulnerabilities & Security Advisories 17

All 17 CVE vulnerabilities found in fast-uri, with AI-generated Chinese analysis, references, and POCs.

This page aggregates security vulnerabilities specifically affecting the fast-uri library, a JavaScript utility designed for parsing and formatting Uniform Resource Identifiers. The collection encompasses a broad spectrum of weaknesses, including denial of service conditions, improper input validation, and potential code execution flaws reported across various releases from its initial public availability through the most recent updates. Visitors can utilize this resource to track the vendor's official security advisories, gain a comprehensive understanding of the specific weakness classes prevalent in URI parsing libraries, or review the complete historical vulnerability record for this product to assess its security posture over time. By centralizing these findings, the page serves as a definitive reference for security researchers, developers, and system administrators seeking to identify, analyze, and mitigate risks associated with the fast-uri package in their applications. The data presented focuses strictly on confirmed technical issues, providing a clear view of the product's evolution regarding security without extraneous commentary or promotional content.

Vendor: fast-uri

CVE ID Title CVSS Severity Published
CVE-2026-110725 fast-uri vulnerable to scheme injection via an unescaped first-segment colon in suffix references CWE-41 3.7 Low 2026-10-20
CVE-2026-110306 fast-uri vulnerable to URI scheme spoofing via percent-encoded scheme decoding CWE-172 6.1 Medium 2026-10-20
CVE-2026-110180 fast-uri vulnerable to host confusion via unchecked WHATWG host canonicalization CWE-20 4.8 Medium 2026-10-20
CVE-2026-110095 fast-uri vulnerable to improper path equivalence in relative reference normalization CWE-41 3.7 Low 2026-10-20
CVE-2026-86818 fast-uri vulnerable to mailto header injection via percent-encoded field-name desynchronization CWE-172 4.8 Medium 2026-09-15
CVE-2026-86472 fast-uri vulnerable to inconsistent host case normalization via percent-encoded octets CWE-178 4.8 Medium 2026-09-15
CVE-2026-84394 fast-uri vulnerable to host confusion via an unclosed bracket in the URI authority CWE-436 7.5 High 2026-09-02
CVE-2026-84292 fast-uri vulnerable to authority injection via an unvalidated port in serialize CWE-116 7.5 High 2026-09-02
CVE-2026-76172 fast-uri vulnerable to host confusion via percent-encoded scheme normalization CWE-177 7.5 High 2026-08-24
CVE-2026-75975 fast-uri vulnerable to server-side request forgery via malformed IPv6 normalization CWE-20 7.5 High 2026-08-24
CVE-2026-75899 fast-uri vulnerable to server-side request forgery via repeated hostname percent-decoding CWE-174 7.5 High 2026-08-24
CVE-2026-75931 fast-uri vulnerable to host confusion via skipped IDN canonicalization on scheme-relative references CWE-436 7.5 High 2026-08-24
CVE-2026-18446 fast-uri vulnerable to host confusion via backslash authority introducer CWE-436 7.5 High 2026-07-31
CVE-2026-16221 fast-uri vulnerable to host confusion via literal backslash authority delimiter CWE-436 7.5 High 2026-07-19
CVE-2026-13676 fast-uri vulnerable to host confusion via failed IDN canonicalization CWE-436 7.5 High 2026-06-29
CVE-2026-6322 fast-uri vulnerable to host confusion via percent-encoded authority delimiters CWE-436 7.5 High 2026-05-05
CVE-2026-6321 fast-uri vulnerable to path traversal via percent-encoded dot segments CWE-22 7.5 High 2026-05-04

All 17 known CVE vulnerabilities affecting fast-uri with full Chinese analysis, references, and POCs where available.