Known vulnerabilities in fast-uri

Vendor: fastify.io
Software: fast-uri
Software CPE: cpe:2.3:a:fastify.io:fast-uri:*:*:*:*:*:*:*:*
Website: https://www.fastify.io/
Total vulnerabilities: 13
Public exploits: 0
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting fast-uri fast-uri is affected by 13 known vulnerabilities: 1 high, 12 medium Critical High Medium Low

Vulnerabilities (13)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU150187 - Improper Handling of Case Sensitivity
CVE-2026-86472		 CWE-178 Medium
No
No
 2.4.7, 3.1.8, 4.1.5 16.09.2026 SB2026091645
SB2026102052
#VU150186 - Encoding Error
CVE-2026-86818		 CWE-172 Medium
No
No
 4.1.5 16.09.2026 SB2026091645
#VU146817 - Interpretation Conflict
CVE-2026-84394		 CWE-436 Medium
No
No
 2.4.6, 3.1.7, 4.1.4 02.09.2026 SB2026090297
SB2026101610
SB2026102052
#VU146816 - Improper Encoding or Escaping of Output
CVE-2026-84292		 CWE-116 Medium
No
No
 2.4.6, 3.1.7, 4.1.4 02.09.2026 SB2026090297
SB2026092458
SB2026093076
and 2 more
#VU145069 - Interpretation Conflict
CVE-2026-75931		 CWE-436 Medium
No
No
 2.4.5, 3.1.6, 4.1.3 25.08.2026 SB2026082529
SB2026090810
SB2026092955
and 2 more
#VU145068 - Double Decoding of the Same Data
CVE-2026-75899		 CWE-174 Medium
No
No
 2.4.5, 3.1.6, 4.1.3 25.08.2026 SB2026082529
SB2026090810
SB2026091636
and 6 more
#VU145066 - Server-Side Request Forgery (SSRF)
CVE-2026-75975		 CWE-918 Medium
No
No
 2.4.5, 3.1.6, 4.1.3 25.08.2026 SB2026082529
SB2026090810
SB2026091636
and 7 more
#VU145064 - Improper Handling of URL Encoding (Hex Encoding)
CVE-2026-76172		 CWE-177 Medium
No
No
 2.4.5, 3.1.6, 4.1.3 25.08.2026 SB2026082529
SB2026090810
SB2026091636
and 7 more
#VU140701 - Interpretation Conflict
CVE-2026-18446		 CWE-436 Medium
No
No
 2.4.4, 3.1.5, 4.1.2 01.08.2026 SB2026080119
SB2026083172
SB2026083174
and 7 more
#VU139083 - Interpretation Conflict
CVE-2026-6322		 CWE-436 Medium
No
No
 2.4.1, 3.1.2 22.07.2026 SB2026072227
SB2026072231
SB2026072232
and 18 more
#VU139082 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-6321		 CWE-22 Medium
No
No
 2.4.1, 3.1.1 22.07.2026 SB2026072227
SB2026072228
SB2026072229
and 13 more
#VU139081 - Interpretation Conflict
CVE-2026-16221		 CWE-436 Medium
No
No
 2.4.3, 3.1.4, 4.1.1 22.07.2026 SB2026072226
SB2026083172
SB2026083174
and 7 more
#VU138918 - Interpretation Conflict
CVE-2026-13676		 CWE-436 High
No
No
 2.4.2, 3.1.3, 4.0.1 21.07.2026 SB2026072195
SB2026072237
SB2026072238
and 13 more