UBUNTU-CVE-2026-75931

See a problem?
Please try reporting it to the source first.
Source
https://ubuntu.com/security/CVE-2026-75931
Import Source
https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-75931.json
JSON Data
https://api.osv.dev/v1/vulns/UBUNTU-CVE-2026-75931
Upstream
Published
2026-08-24T10:16:00Z
Modified
2026-09-02T19:36:33.934934083Z
Severity
  • 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N CVSS Calculator
  • Ubuntu - medium
Summary
[none]
Details

fast-uri is a URI parser for Node.js. It canonicalizes a host to its ASCII form only when the input carries an explicit scheme, so a scheme-relative reference such as a host preceded by two slashes is returned with its host verbatim and no error set. As a result fast-uri's own entry points disagree with each other: parse, resolve, normalize, and equal can yield different hosts for the same input depending only on whether a scheme is written out, and equal can return opposite verdicts for the same pair of hosts. An application that extracts a host with fast-uri to check it against a policy list and then resolves the same reference can make its decision on one host while the destination is another, enabling host confusion and policy bypass. The affected versions are 2.4.2 up to but not including 2.4.5, 3.1.3 up to but not including 3.1.6, and 4.0.1 up to but not including 4.1.3. The issue is fixed in 2.4.5, 3.1.6, and 4.1.3, which canonicalize the host consistently across the resolve path. Users should upgrade to a patched version.

References

Affected packages

Ubuntu:18.04:LTS / node-ajv

Package

Name
node-ajv
Purl
pkg:deb/ubuntu/node-ajv?arch=source&distro=bionic

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.0.0-1

Ecosystem specific 

{
    "binaries": [
        {
            "binary_version": "5.0.0-1",
            "binary_name": "node-ajv"
        }
    ]
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-75931.json"

Ubuntu:20.04:LTS / node-ajv

Package

Name
node-ajv
Purl
pkg:deb/ubuntu/node-ajv?arch=source&distro=focal

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

6.*
6.10.2-1

Ecosystem specific 

{
    "binaries": [
        {
            "binary_version": "6.10.2-1",
            "binary_name": "node-ajv"
        }
    ]
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-75931.json"

Ubuntu:22.04:LTS / node-ajv

Package

Name
node-ajv
Purl
pkg:deb/ubuntu/node-ajv?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

6.*
6.12.6-2
6.12.6-3

Ecosystem specific 

{
    "binaries": [
        {
            "binary_version": "6.12.6-3",
            "binary_name": "node-ajv"
        }
    ]
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-75931.json"

Ubuntu:24.04:LTS / node-ajv

Package

Name
node-ajv
Purl
pkg:deb/ubuntu/node-ajv?arch=source&distro=noble

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

6.*
6.12.6-3
8.*
8.12.0~ds+~2.1.1-4

Ecosystem specific 

{
    "binaries": [
        {
            "binary_version": "8.12.0~ds+~2.1.1-4",
            "binary_name": "node-ajv"
        }
    ]
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-75931.json"

Ubuntu:26.04:LTS / node-ajv

Package

Name
node-ajv
Purl
pkg:deb/ubuntu/node-ajv?arch=source&distro=resolute

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

8.*
8.12.0~ds+~2.1.1-5
8.17.1~ds+~3.0.1+~3.1.0-2
8.17.1~ds+~3.0.1+~3.1.0-4build1

Ecosystem specific 

{
    "binaries": [
        {
            "binary_version": "8.17.1~ds+~3.0.1+~3.1.0-4build1",
            "binary_name": "node-ajv"
        }
    ]
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-75931.json"