Known vulnerabilities in fast-uri 2.4.4

Vendor: fastify.io
Software: fast-uri
Version: 2.4.4
Software CPE: cpe:2.3:a:fastify.io:fast-uri:*:*:*:*:*:*:*:*
Website: https://www.fastify.io/
Total vulnerabilities: 5
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting fast-uri version 2.4.4 fast-uri 2.4.4 is affected by 5 vulnerabilities: 5 medium Critical High Medium Low

Vulnerabilities (5)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU146816 - Improper Encoding or Escaping of Output
CVE-2026-84292		 CWE-116 Medium
No
No
 2.4.6, 3.1.7, 4.1.4 02.09.2026 SB2026090297
#VU145069 - Interpretation Conflict
CVE-2026-75931		 CWE-436 Medium
No
No
 2.4.5, 3.1.6, 4.1.3 25.08.2026 SB2026082529
#VU145068 - Double Decoding of the Same Data
CVE-2026-75899		 CWE-174 Medium
No
No
 2.4.5, 3.1.6, 4.1.3 25.08.2026 SB2026082529
#VU145066 - Server-Side Request Forgery (SSRF)
CVE-2026-75975		 CWE-918 Medium
No
No
 2.4.5, 3.1.6, 4.1.3 25.08.2026 SB2026082529
#VU145064 - Improper Handling of URL Encoding (Hex Encoding)
CVE-2026-76172		 CWE-177 Medium
No
No
 2.4.5, 3.1.6, 4.1.3 25.08.2026 SB2026082529