fast-uri

Security advisories13

• fast-uri: fast-uri vulnerable to scheme injection via an unescaped first-segment colon in suffix referencesfixed in 2.4.8, 3.1.9, 4.2.3
• fast-uri: fast-uri vulnerable to host confusion via failed IDN canonicalizationfixed in 4.0.1, 3.1.3, 2.4.2
• fast-uri: fast-uri vulnerable to host confusion via backslash authority introducerfixed in 2.4.4, 3.1.5, 4.1.2
• fast-uri: fast-uri vulnerable to server-side request forgery via malformed IPv6 normalizationfixed in 2.4.5, 3.1.6, 4.1.3
• fast-uri: fast-uri vulnerable to inconsistent host case normalization via percent-encoded octetsfixed in 2.4.7, 3.1.8, 4.1.5
• fast-uri: fast-uri vulnerable to host confusion via percent-encoded scheme normalizationfixed in 2.4.5, 3.1.6, 4.1.3
• fast-uri: fast-uri vulnerable to path traversal via percent-encoded dot segmentsfixed in 3.1.1, 2.4.1
• fast-uri: fast-uri vulnerable to authority injection via an unvalidated port in serializefixed in 2.4.6, 3.1.7, 4.1.4
• fast-uri: fast-uri vulnerable to host confusion via literal backslash authority delimiterfixed in 2.4.3, 3.1.4, 4.1.1
• fast-uri: fast-uri vulnerable to host confusion via percent-encoded authority delimitersfixed in 3.1.2, 2.4.1
• fast-uri: fast-uri vulnerable to URI scheme spoofing via percent-encoded scheme decodingfixed in 2.4.8, 3.1.9, 4.2.3
• fast-uri: fast-uri vulnerable to host confusion via unchecked WHATWG host canonicalizationfixed in 2.4.8, 3.1.9, 4.2.3
• fast-uri: fast-uri vulnerable to improper path equivalence in relative reference normalizationfixed in 2.4.8, 3.1.9, 4.2.3

Versions that change something