Debian/node-ajv: high 7.5
fast-uri is a URI parser for Node.js. Its custom parser for bracketed IPv6 literals does not validate the complete IPv6 grammar, so invalid trailing text in an authority can be silently discarded and
Action: Upgrade node-ajv to 8.20.0~ds+~cs7.1.4-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 8.20.0~ds+~cs7.1.4-1 | - |
Fixed versions
| 8.20.0~ds+~cs7.1.4-1 |
Sources
- osv: DEBIAN-CVE-2026-75975#Debian:14/node-ajv
- https://security-tracker.debian.org/tracker/CVE-2026-75975
published · modified · JSON