Vulnerabilities

ID
Packages
Summary
Published
arrow_upward
Attributes
GHSA-hrr3-gc8f-f4qj
  • npm/fast-uri
fast-uri vulnerable to inconsistent host case normalization via percent-encoded octets 4 days ago
  • Fix available
  • Severity - 4.8 (Medium)
GHSA-jvvf-x445-j334
  • npm/fast-uri
fast-uri vulnerable to mailto header injection via percent-encoded field-name desynchronization 4 days ago
  • Fix available
  • Severity - 4.8 (Medium)
GHSA-qw65-cvwx-89v3
  • npm/fast-uri
fast-uri vulnerable to authority injection via an unvalidated port in serialize 5 days ago
  • Fix available
  • Severity - 7.5 (High)
GHSA-58mr-gqgx-xq4g
  • npm/fast-uri
fast-uri vulnerable to host confusion via an unclosed bracket in the URI authority 5 days ago
  • Fix available
  • Severity - 7.5 (High)
GHSA-5jgf-p345-68v8
  • npm/fast-uri
fast-uri vulnerable to host confusion via skipped IDN canonicalization on scheme-relative references 02 Sep
  • Fix available
  • Severity - 7.5 (High)
GHSA-f65p-4m7j-42xc
  • npm/fast-uri
fast-uri vulnerable to server-side request forgery via malformed IPv6 normalization 02 Sep
  • Fix available
  • Severity - 7.5 (High)
GHSA-fph4-wmhf-6fwf
  • npm/fast-uri
fast-uri vulnerable to server-side request forgery via repeated hostname percent-decoding 02 Sep
  • Fix available
  • Severity - 7.5 (High)
GHSA-jqff-g426-hqxp
  • npm/fast-uri
fast-uri vulnerable to host confusion via percent-encoded scheme normalization 02 Sep
  • Fix available
  • Severity - 7.5 (High)
GHSA-7p8r-x3mc-p8w7
  • npm/fast-uri
fast-uri vulnerable to host confusion via backslash authority introducer 03 Aug
  • Fix available
  • Severity - 7.5 (High)
GHSA-v2hh-gcrm-f6hx
  • npm/fast-uri
fast-uri vulnerable to host confusion via literal backslash authority delimiter 21 Jul
  • Fix available
  • Severity - 7.5 (High)
GHSA-4c8g-83qw-93j6
  • npm/fast-uri
fast-uri vulnerable to host confusion via failed IDN canonicalization 21 Jul
  • Fix available
  • Severity - 7.5 (High)
GHSA-v39h-62p7-jpjc
  • npm/fast-uri
fast-uri vulnerable to host confusion via percent-encoded authority delimiters 08 May
  • Fix available
  • Severity - 7.5 (High)
GHSA-q3j6-qgpj-74h6
  • npm/fast-uri
fast-uri vulnerable to path traversal via percent-encoded dot segments 08 May
  • Fix available
  • Severity - 7.5 (High)