Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:openjsf:fast-Uri:2.4.5:*:*:*:*:node.js:*:*

1 brief RSS
high advisory

Host Confusion Vulnerability in fast-uri via Malformed URI Authority

The fast-uri library incorrectly parses URI authorities containing unbalanced brackets, allowing attackers to bypass SSRF denylists and security filters by causing a discrepancy between the parsed host and the host resolved by underlying HTTP clients.

fast-uri vulnerability ssrf web-security
1t 1c