Skip to content
Threat Feed
Subscribe

Product

Fast-Uri (>= 3.0.0, < 3.1.7)

1 brief RSS
high advisory

Host Confusion Vulnerability in fast-uri via Malformed URI Authority

The fast-uri library incorrectly parses URI authorities containing unbalanced brackets, allowing attackers to bypass SSRF denylists and security filters by causing a discrepancy between the parsed host and the host resolved by underlying HTTP clients.

fast-uri +3 vulnerability ssrf web-security
1t 1c updated