Security vulnerabilities and automated fixes for fast uri issues
1 post found
CVE-2026-13676 exposes a critical flaw in fast-uri's handling of Unicode hostnames, where improper canonicalization allows attackers to bypass security policies. The fix upgrades fast-uri from version 3.1.0 to 4.1.2 through npm overrides, ensuring proper normalization of internationalized domain names.