VendorsOpenJSFfast-uriany version
Vulnerabilities

OpenJSF OpenJS Foundation fast-uri any version

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

10CVEs
CVE-2026-6321
fast-uri vulnerable to path traversal via percent-encoded dot segments
Published 2026-05-04 · Modified
7.5EPSS 0.008
CVE-2026-6322
fast-uri vulnerable to host confusion via percent-encoded authority delimiters
Published 2026-05-05 · Modified
7.5EPSS 0.007
CVE-2026-13676
fast-uri vulnerable to host confusion via failed IDN canonicalization
Published 2026-06-29 · Modified
7.5EPSS 0.005
CVE-2026-75931
fast-uri vulnerable to host confusion via skipped IDN canonicalization on scheme-relative references
Published 2026-08-24 · Analyzed
7.5EPSS 0.004
CVE-2026-76172
fast-uri vulnerable to host confusion via percent-encoded scheme normalization
Published 2026-08-24 · Analyzed
7.5EPSS 0.004
CVE-2026-84292
fast-uri vulnerable to authority injection via an unvalidated port in serialize
Published 2026-09-02 · Analyzed
7.5EPSS 0.004
CVE-2026-75899
fast-uri vulnerable to server-side request forgery via repeated hostname percent-decoding
Published 2026-08-24 · Analyzed
7.5EPSS 0.004
CVE-2026-75975
fast-uri vulnerable to server-side request forgery via malformed IPv6 normalization
Published 2026-08-24 · Analyzed
7.5EPSS 0.004
CVE-2026-16221
fast-uri vulnerable to host confusion via literal backslash authority delimiter
Published 2026-07-19 · Analyzed
7.5EPSS 0.003
CVE-2026-18446
fast-uri vulnerable to host confusion via backslash authority introducer
Published 2026-07-31 · Analyzed
7.5EPSS 0.002