CVE-2026-110095 | Fastify fast-uri up to 2.4.7/3.1.8/4.2.2 URI Parser normalize/serialize path traversal

October 20, 2026 Yanac

A vulnerability was found in Fastify fast-uri up to 2.4.7/3.1.8/4.2.2. It has been declared as problematic. Impacted is the function normalize/serialize of the component URI Parser. Executing a manipulation can lead to path traversal.

This vulnerability is registered as CVE-2026-110095. It is possible to launch the attack remotely. No exploit is available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More