CVE-2026-110306Published
fast-uri is a dependency-free RFC 3986 URI parser and serializer for Node.js. In versions before 2.4.8, from 3.0.0 through 3.1.8, and from 4.0.0 through 4.2.2, fast-uri percent-decodes the scheme component with the legacy global unescape() …
Exact source revision recorded 25 Oct 2026 05:17:13 UTC. It does not establish the source's current position. Latest evidence.
nvd · CVE-2026-110306
PublishedNo affected-package array is stated in this source revision. Check its state and earlier observations; this does not establish that every package is unaffected.