Product by Openjsf
OpenJS Foundation fast-uri
11 known vulnerabilities in OpenJS Foundation fast-uri (Openjsf), 0 of them actively exploited (CISA KEV).
Key figures
11
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
0
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2026-6321 | fast-uri vulnerable to path traversal via percent-encoded dot segments | 7.5 | |
| High | CVE-2026-13676 | fast-uri vulnerable to host confusion via failed IDN canonicalization | 7.5 | |
| High | CVE-2026-84394 | fast-uri vulnerable to host confusion via an unclosed bracket in the URI authority | 7.5 | |
| High | CVE-2026-75931 | fast-uri vulnerable to host confusion via skipped IDN canonicalization on scheme-relative references | 7.5 | |
| High | CVE-2026-16221 | fast-uri vulnerable to host confusion via literal backslash authority delimiter | 7.5 | |
| High | CVE-2026-6322 | fast-uri vulnerable to host confusion via percent-encoded authority delimiters | 7.5 | |
| High | CVE-2026-18446 | fast-uri vulnerable to host confusion via backslash authority introducer | 7.5 | |
| High | CVE-2026-84292 | fast-uri vulnerable to authority injection via an unvalidated port in serialize | 7.5 | |
| High | CVE-2026-76172 | fast-uri vulnerable to host confusion via percent-encoded scheme normalization | 7.5 | |
| High | CVE-2026-75975 | fast-uri vulnerable to server-side request forgery via malformed IPv6 normalization | 7.5 | |
| High | CVE-2026-75899 | fast-uri vulnerable to server-side request forgery via repeated hostname percent-decoding | 7.5 |