{"action":"Upgrade fast-uri to 2.4.5 or later.","affected":[{"fixed":"2.4.5","introduced":"2.4.2"},{"fixed":"3.1.6","introduced":"3.1.3"},{"fixed":"4.1.3","introduced":"4.0.1"}],"component":"fast-uri","cve_ids":["CVE-2026-75931"],"ecosystem":"npm","epss":0.00398,"exploited":false,"fixed_versions":["2.4.5","3.1.6","4.1.3"],"ghsa_id":"GHSA-5jgf-p345-68v8","id":"tcs_01M5KF416HAZHS232PJ768HTET","modified_at":"2026-09-10T03:51:15.083681721Z","published_at":"2026-09-02T15:44:30Z","references":["https://osv.dev/vulnerability/GHSA-5jgf-p345-68v8","https://github.com/fastify/fast-uri/security/advisories/GHSA-5jgf-p345-68v8","https://nvd.nist.gov/vuln/detail/CVE-2026-75931","https://github.com/fastify/fast-uri/commit/0256bc8d1f28b5d0ac657faf67e2411a189dfcb5","https://github.com/fastify/fast-uri/commit/444ecdad447db2cc23c4d422acc6f0daa6fa8eef","https://github.com/fastify/fast-uri/commit/4e4ebd8b245f6ca16e448203559eea3e545453a3","https://cna.openjsf.org/security-advisories.html","https://github.com/fastify/fast-uri","https://github.com/fastify/fast-uri/releases/tag/v2.4.5","https://github.com/fastify/fast-uri/releases/tag/v3.1.6","https://github.com/fastify/fast-uri/releases/tag/v4.1.3"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-5jgf-p345-68v8","url":"https://osv.dev/vulnerability/GHSA-5jgf-p345-68v8"}],"summary":"fast-uri vulnerable to host confusion via skipped IDN canonicalization on scheme-relative references"}