VYPR

fast-uri

by Fast Uri

Source repositories

CVEs (1)

  • CVE-2026-13676HigJun 29, 2026
    risk 0.42cvss 7.5epss 0.00

    fast-uri versions 2.3.1 through 3.1.2 and 4.0.0 fail to canonicalize Unicode (IDN) hostnames for HTTP-family URLs. The IDN conversion path calls a helper that does not exist on the global URL constructor, silently leaving the host in its original Unicode form while normalize()…