CVE-2026-110306 | fastify fast-uri up to 2.4.7/3.1.8/4.2.2 Scheme Parser unescape cross site scripting

October 20, 2026 Yanac

A vulnerability labeled as problematic has been found in fastify fast-uri up to 2.4.7/3.1.8/4.2.2. This impacts the function unescape of the component Scheme Parser. Such manipulation leads to cross site scripting.

This vulnerability is traded as CVE-2026-110306. The attack may be launched remotely. There is no exploit available.

The affected component should be upgraded.VulDB Recent EntriesRead More