Vulnerabilities

TI-2026-76745 CVE-2026-110725 · GHSA-333x-w4r6-6crp

Scheme injection in fast-uri via unescaped colon in suffix references

LOW 17

fast-uri is a dependency-free RFC 3986 URI parser and serializer for Node.js.

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.00302 Published 2026-10-20 Partial fix · 2.4.8, 3.1.9 +1 CWE-116

TI-2026-76744 CVE-2026-110306 · GHSA-w74x-v6f9-j3xg

LOW 27

fast-uri is a dependency-free RFC 3986 URI parser and serializer for Node.js.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0025 Published 2026-10-20 Partial fix · 2.4.8, 3.1.9 +1 CWE-172

TI-2026-76743 CVE-2026-110180 · GHSA-wjr9-j795-jxcr

LOW 22

fast-uri is a dependency-free RFC 3986 URI parser and serializer for Node.js.

CVSS 3.1MEDIUM 4.8 Network No auth No interaction EPSS 0.00255 Published 2026-10-20 Partial fix · 2.4.8, 3.1.9 +1 CWE-20

TI-2026-76742 CVE-2026-110095 · GHSA-xhq7-xmqj-769h

LOW 17

fast-uri is a dependency-free RFC 3986 URI parser and serializer for Node.js.

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.00289 Published 2026-10-20 Partial fix · 2.4.8, 3.1.9 +1 CWE-41