How many CVEs does fast-uri have?

fast-uri has 13 published CVE records since 2026, including 13 in the last two years.

How many fast-uri CVEs are in CISA KEV?

None of fast-uri's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which fast-uri products have the most CVEs?

The fast-uri products with the most published CVEs are fast-uri.

What are the most common weakness types in fast-uri CVEs?

fast-uri's CVEs most often map to these CWE weakness types: CWE-436 (Interpretation Conflict), CWE-172 (Encoding Error), CWE-174 (Double Decoding of the Same Data), CWE-177 (Improper Handling of URL Encoding (Hex Encoding)).

Are there public exploits for fast-uri vulnerabilities?

No fast-uri CVEs currently have a tracked public exploit in this dataset.

What is the average severity of fast-uri CVEs?

The average CVSS base score across fast-uri's scored CVEs is 7.1.

RadicalNotion.AI

Log in Create an account

13 CVEs

fast-uri Vulnerabilities

Name: fast-uri vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for fast-uri.

13

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

0

Public exploits

PoC or exploit code

7.1

Avg CVSS

2026–2026

Overview

fast-uri has 13 published CVE records since 2026, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 0 have a known public exploit. The average CVSS base score across scored CVEs is 7.1.

Security scorecard

A quick read on fast-uri's vulnerability posture, as a share of its 13 published CVEs.

Average CVSS: 7.1
Critical / high: 85%
Actively exploited (KEV): 0%
Public exploit available: 0%
Patch available: 100%

Severity and exploitation

How the CVSS severity of fast-uri's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical0

High11

Medium2

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of fast-uri's CVEs are currently listed in CISA's KEV catalog.

Public exploits

0

No fast-uri CVEs currently have a tracked public exploit.

Most affected products

The fast-uri products with the most published CVEs. Follow any product to browse its versions and vulnerabilities.

fast-uri13 CVEs

Common weakness types

The CWE weakness categories most often found in fast-uri CVEs. Follow any weakness for its full explanation.

CNAs that assign these CVEs

The CVE Numbering Authorities that publish fast-uri CVE records.

openjs13 CVEs

Latest fast-uri CVEs

The most recently disclosed vulnerabilities affecting fast-uri.

fast-uri vulnerable to mailto header injection via percent-encoded field-name desynchronization
CWE-172
Medium · CVSS 4.8
EPSS 0.3%2026-09-15
fast-uri vulnerable to inconsistent host case normalization via percent-encoded octets
CWE-178
Medium · CVSS 4.8
EPSS 0.3%2026-09-15
fast-uri vulnerable to host confusion via an unclosed bracket in the URI authority
CWE-436
High · CVSS 7.5
EPSS 0.4%2026-09-02
fast-uri vulnerable to authority injection via an unvalidated port in serialize
CWE-116
High · CVSS 7.5
EPSS 0.2%2026-09-02
fast-uri vulnerable to host confusion via percent-encoded scheme normalization
CWE-177
High · CVSS 7.5
EPSS 0.2%2026-08-24
fast-uri vulnerable to server-side request forgery via malformed IPv6 normalization
CWE-20
High · CVSS 7.5
EPSS 0.2%2026-08-24
fast-uri vulnerable to server-side request forgery via repeated hostname percent-decoding
CWE-174
High · CVSS 7.5
EPSS 0.2%2026-08-24
fast-uri vulnerable to host confusion via skipped IDN canonicalization on scheme-relative references
CWE-436
High · CVSS 7.5
EPSS 0.4%2026-08-24
fast-uri vulnerable to host confusion via backslash authority introducer
CWE-436
High · CVSS 7.5
EPSS 0.2%2026-07-31
fast-uri vulnerable to host confusion via literal backslash authority delimiter
CWE-436
High · CVSS 7.5
EPSS 0.3%2026-07-19
fast-uri vulnerable to host confusion via failed IDN canonicalization
CWE-436
High · CVSS 7.5
EPSS 0.5%2026-06-29
fast-uri vulnerable to host confusion via percent-encoded authority delimiters
CWE-436
High · CVSS 7.5
EPSS 0.7%2026-05-05

Get an alert for each new fast-uri CVE, with AI-written analysis and remediation steps.

Monitor fast-uri CVEs

Other vendors

CVE counts for other vendors.

microsoft41,739 CVEs linux25,260 CVEs Google17,495 CVEs Apple15,495 CVEs Oracle13,348 CVEs Debian10,233 CVEs IBM9,452 CVEs Red Hat8,581 CVEs

Browse all vendors

Frequently asked questions

Common questions about fast-uri vulnerabilities.

How many CVEs does fast-uri have?: fast-uri has 13 published CVE records since 2026, including 13 in the last two years.
How many fast-uri CVEs are in CISA KEV?: None of fast-uri's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Which fast-uri products have the most CVEs?: The fast-uri products with the most published CVEs are fast-uri.
What are the most common weakness types in fast-uri CVEs?: fast-uri's CVEs most often map to these CWE weakness types: CWE-436 (Interpretation Conflict), CWE-172 (Encoding Error), CWE-174 (Double Decoding of the Same Data), CWE-177 (Improper Handling of URL Encoding (Hex Encoding)).
Are there public exploits for fast-uri vulnerabilities?: No fast-uri CVEs currently have a tracked public exploit in this dataset.
What is the average severity of fast-uri CVEs?: The average CVSS base score across fast-uri's scored CVEs is 7.1.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track fast-uri vulnerabilities

Get an alert for each new fast-uri CVE, with AI-written analysis and remediation steps.

Create an account See pricing