fast-uri vulnerable to inconsistent host case normalization via percent-encoded octets
osv · CVE-2026-86472
npm: fast-uri · npm: fast-uri · npm: fast-uri
No access to your tenant or devices. Every item links to its source. What this means
Microsoft security updates and public advisory evidence: affected products, fixing updates, exploitation and source coverage.
Public source statements across vendors. Explicit aliases connect records; each publisher keeps its own state, severity and affected-version evidence.
osv · CVE-2026-86472
npm: fast-uri · npm: fast-uri · npm: fast-uri
osv · CVE-2026-101911
npm: ip-address
osv · CVE-2026-102278
npm: brace-expansion · npm: brace-expansion · npm: brace-expansion
osv · CVE-2026-17495
npm: moment
osv · CVE-2026-86818
npm: fast-uri
osv · CVE-2026-100699
npm: nodemailer
osv · CVE-2026-102281
npm: @nestjs/microservices · npm: @nestjs/microservices
osv · CVE-2026-102277
npm: brace-expansion · npm: brace-expansion · npm: brace-expansion
osv · CVE-2026-102599
npm: engine.io
osv · CVE-2026-101894
npm: @xhmikosr/decompress · npm: @xhmikosr/decompress · npm: decompress
osv · CVE-2026-100700
npm: nodemailer
osv · CVE-2026-102276
npm: brace-expansion · npm: brace-expansion · npm: brace-expansion
osv · GHSA-3p7v-9fcr-jcp8
npm: ts-rand-sdk
osv · GHSA-jxw5-69p3-hpm4
npm: native-runner
osv ·
npm: test-agency-assignment-02
osv ·
npm: test-agency-assignment-01
osv · CVE-2026-102342 · RUSTSEC-2026-0213
crates.io: ammonia · crates.io: ammonia · crates.io: ammonia
osv ·
npm: @selfpentest/eslint-pentest-plugin
osv ·
npm: @selfpentest/bin-confusion
osv ·
npm: @rutxploit-sec/waves-button-poc
osv ·
npm: @rutxploit-sec/waves-icons
osv ·
npm: @rutxploit-sec/subsplash-google-tag-manager
osv ·
npm: @rutxploit-sec/subsplash-canny
cve-program ·
cve-program ·
Vendor product: renovate · Vendor product: renovate-ce · Vendor product: renovate-ee-server
cve-program ·
Vendor product: renovate · Vendor product: renovate-ce · Vendor product: renovate-ee-server
cve-program ·
Vendor product: renovate · Vendor product: renovate-ce · Vendor product: renovate-ee-server
cve-program ·
Vendor product: renovate · Vendor product: renovate-ce · Vendor product: renovate-ee-server
cve-program ·
Vendor product: renovate · Vendor product: renovate-ce · Vendor product: renovate-ee-server
cve-program ·
Vendor product: renovate · Vendor product: renovate-ce · Vendor product: renovate-ee-server
cve-program ·
Vendor product: renovate · Vendor product: renovate-ce · Vendor product: renovate-ee-server
cve-program ·
Vendor product: renovate · Vendor product: renovate-ce · Vendor product: renovate-ee-server
cve-program ·
Vendor product: renovate · Vendor product: renovate-ce · Vendor product: renovate-ee-server
cve-program ·
Vendor product: renovate · Vendor product: renovate-ce · Vendor product: renovate-ee-server
cve-program ·
Vendor product: renovate
cve-program ·
Vendor product: Mediawiki - Cargo extension
osv · GO-2026-5709
Go: github.com/crossplane/crossplane/v2 · Go: github.com/crossplane/crossplane/v2 · Go: github.com/crossplane/crossplane
cve-program ·
Vendor product: Mediawiki - FlaggedRevs extension
cve-program ·
Vendor product: Mediawiki - Cargo extension
cve-program ·
Vendor product: Mediawiki - Cargo extension
cve-program ·
Vendor product: Mediawiki - Cargo extension
cve-program ·
Vendor product: Mediawiki - Cargo extension
cve-program ·
Vendor product: Mediawiki - CirrusSearch Extension
A catalog match establishes published evidence, not applicability to your environment. Check resolved package dependencies, or open a Microsoft CVE for fixing KBs, releases and planning.