CVE-2026-110725 | Fastify fast-uri up to 2.4.7/3.1.8/4.2.2 URI Serialization serialize/normalize/resolve reference cross site scripting

October 20, 2026 Yanac

A vulnerability marked as problematic has been reported in Fastify fast-uri up to 2.4.7/3.1.8/4.2.2. Affected is the function serialize/normalize/resolve of the component URI Serialization. Performing a manipulation of the argument reference results in cross site scripting.

This vulnerability is known as CVE-2026-110725. Remote exploitation of the attack is possible. No exploit is available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More