Ffast-uri

Products

Exploited and recent CVEs

• CVE-2026-110725 Low 3.7 fast-uri vulnerable to scheme injection via an unescaped first-segment colon in suffix references 0.3%
• CVE-2026-110306 Medium 6.1 fast-uri vulnerable to URI scheme spoofing via percent-encoded scheme decoding 0.2%
• CVE-2026-110180 Medium 4.8 fast-uri vulnerable to host confusion via unchecked WHATWG host canonicalization 0.3%
• CVE-2026-110095 Low 3.7 fast-uri vulnerable to improper path equivalence in relative reference normalization 0.3%
• CVE-2026-86818 Medium 4.8 fast-uri vulnerable to mailto header injection via percent-encoded field-name desynchronization 0.3%
• CVE-2026-86472 Medium 4.8 fast-uri vulnerable to inconsistent host case normalization via percent-encoded octets 0.3%
• CVE-2026-84394 High 7.5 fast-uri vulnerable to host confusion via an unclosed bracket in the URI authority 0.4%
• CVE-2026-84292 High 7.5 fast-uri vulnerable to authority injection via an unvalidated port in serialize 0.2%
• CVE-2026-76172 High 7.5 fast-uri vulnerable to host confusion via percent-encoded scheme normalization 0.2%
• CVE-2026-75975 High 7.5 fast-uri vulnerable to server-side request forgery via malformed IPv6 normalization 0.2%
• CVE-2026-75899 High 7.5 fast-uri vulnerable to server-side request forgery via repeated hostname percent-decoding 0.2%
• CVE-2026-75931 High 7.5 fast-uri vulnerable to host confusion via skipped IDN canonicalization on scheme-relative references 0.4%
• CVE-2026-18446 High 7.5 fast-uri vulnerable to host confusion via backslash authority introducer 0.4%
• CVE-2026-16221 High 7.5 fast-uri vulnerable to host confusion via literal backslash authority delimiter 0.4%
• CVE-2026-13676 High 7.5 fast-uri vulnerable to host confusion via failed IDN canonicalization 0.7%
• CVE-2026-6322 High 7.5 fast-uri vulnerable to host confusion via percent-encoded authority delimiters 0.5%
• CVE-2026-6321 High 7.5 fast-uri vulnerable to path traversal via percent-encoded dot segments 0.6%