{"action":"Upgrade fast-uri to 2.4.1 or later.","affected":[{"fixed":"3.1.2","introduced":"3.0.0"},{"fixed":"2.4.1","introduced":"0"}],"component":"fast-uri","cve_ids":["CVE-2026-6322"],"ecosystem":"npm","exploited":false,"fixed_versions":["3.1.2","2.4.1"],"ghsa_id":"GHSA-v39h-62p7-jpjc","id":"tcs_01M5KGAH3RXMMCGZVTDRZG2FDN","modified_at":"2026-09-10T03:50:47.650164671Z","published_at":"2026-05-08T19:13:01Z","references":["https://osv.dev/vulnerability/GHSA-v39h-62p7-jpjc","https://github.com/fastify/fast-uri/security/advisories/GHSA-v39h-62p7-jpjc","https://nvd.nist.gov/vuln/detail/CVE-2026-6322","https://access.redhat.com/errata/RHSA-2026:41928","https://access.redhat.com/errata/RHSA-2026:41951","https://access.redhat.com/errata/RHSA-2026:42078","https://access.redhat.com/errata/RHSA-2026:42142","https://access.redhat.com/errata/RHSA-2026:43038","https://access.redhat.com/errata/RHSA-2026:54395","https://access.redhat.com/errata/RHSA-2026:54555","https://access.redhat.com/errata/RHSA-2026:56366","https://access.redhat.com/errata/RHSA-2026:56431","https://access.redhat.com/errata/RHSA-2026:56928","https://access.redhat.com/errata/RHSA-2026:56968","https://access.redhat.com/errata/RHSA-2026:57013","https://access.redhat.com/errata/RHSA-2026:57487","https://access.redhat.com/errata/RHSA-2026:60520","https://access.redhat.com/errata/RHSA-2026:60855","https://access.redhat.com/errata/RHSA-2026:61783","https://access.redhat.com/security/cve/CVE-2026-6322","https://bugzilla.redhat.com/show_bug.cgi?id=2466684","https://cna.openjsf.org/security-advisories.html","https://github.com/fastify/fast-uri","https://github.com/fastify/fast-uri/releases/tag/v2.4.1","https://github.com/fastify/fast-uri/releases/tag/v3.1.2","https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6322.json","https://access.redhat.com/errata/RHSA-2026:25271","https://access.redhat.com/errata/RHSA-2026:25273","https://access.redhat.com/errata/RHSA-2026:26225","https://access.redhat.com/errata/RHSA-2026:26234","https://access.redhat.com/errata/RHSA-2026:28571","https://access.redhat.com/errata/RHSA-2026:29197","https://access.redhat.com/errata/RHSA-2026:29795","https://access.redhat.com/errata/RHSA-2026:29796","https://access.redhat.com/errata/RHSA-2026:29800","https://access.redhat.com/errata/RHSA-2026:29834","https://access.redhat.com/errata/RHSA-2026:30076","https://access.redhat.com/errata/RHSA-2026:33683","https://access.redhat.com/errata/RHSA-2026:34160","https://access.redhat.com/errata/RHSA-2026:34342","https://access.redhat.com/errata/RHSA-2026:34374","https://access.redhat.com/errata/RHSA-2026:34766","https://access.redhat.com/errata/RHSA-2026:34770","https://access.redhat.com/errata/RHSA-2026:36651","https://access.redhat.com/errata/RHSA-2026:36754","https://access.redhat.com/errata/RHSA-2026:37186","https://access.redhat.com/errata/RHSA-2026:37385","https://access.redhat.com/errata/RHSA-2026:37628","https://access.redhat.com/errata/RHSA-2026:40118","https://access.redhat.com/errata/RHSA-2026:40945","https://access.redhat.com/errata/RHSA-2026:41066"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-v39h-62p7-jpjc","url":"https://osv.dev/vulnerability/GHSA-v39h-62p7-jpjc"}],"summary":"fast-uri vulnerable to host confusion via percent-encoded authority delimiters"}