CVE-2026-110180
MediumAdvisory
Published 23 Oct 2026In the index since 24 Oct 2026
- Severity
- Medium
- worst across findings
- CVSS
- 4.8
- base score, highest
- EPSS
- 0.002
- 10th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 111
- of 18,232 indexed, latest versions
- Container images
- 97
- deployed by those charts
- Fix available
- 1 of 1
- affected package
fast-uri vulnerable to host confusion via unchecked WHATWG host canonicalization
Carried by container images the latest versions of 111 of 18,232 indexed charts deploy, on 97 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| fast-urinpm | 3.1.3, 3.1.4, 3.1.5, 3.1.6+5 more | 3.1.9, 4.2.3 | 97 |
- OSV records
- GHSA-wjr9-j795-jxcr
Charts affected
111 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| decisionrules-aksdecisionrules-aksOfficialVerified publisher | 0.3.0 | 1 of 2See more | 606 |
| decisionrules-eksdecisionrules-eksOfficialVerified publisher | 0.4.0 | 1 of 2See more | 606 |
| decisionrules-ingressdecisionrules-ingressOfficialVerified publisher | 0.3.0 | 1 of 2See more | 606 |
| decisionrules-ocpdecisionrules-ocpOfficialVerified publisher | 0.2.1 | 1 of 4See more | 2,201 |
| dial-admindialVerified publisher | 0.20.0 | 1 of 3See more | 3,857 |
| node-reddjdl-charts | 0.33.0 | 1 of 1See more | 342 |
| openclaweasy-openclaw | 0.1.0 | 1 of 1See more | 2,448 |
| node-redegebackVerified publisher | 2.0.13 | 1 of 1See more | 1,658 |
| connector-helm-chartenmeshed-connectorOfficialVerified publisher | 7.5.7 | 1 of 1See more | 378 |
| edp-installepmdedpOfficialVerified publisher | 3.16.0 | 1 of 7See more | 1,953 |
| krci-portalepmdedpVerified publisher | 0.9.0 | 1 of 1See more | 273 |
| lodestarethereum-helm-chartsVerified publisher | 1.2.2 | 1 of 2See more | 3,369 |
| consent-managerfiware | 0.2.0 | 1 of 1See more | 2,545 |
| flanksource-uiflanksourceVerified publisher | 1.4.354 | 1 of 1See more | 3,657 |
| mission-controlflanksourceVerified publisher | 0.1.339 | 1 of 8See more | 12,093 |
| redis-uigin | 0.0.1 | 1 of 1See more | 1,583 |
| web-checkhajowielandVerified publisher | 1.0.1 | 1 of 1See more | 8,462 |
| bytestashhelmforgeVerified publisher | 1.0.4 | 1 of 1See more | 59 |
| documensohelmforgeVerified publisher | 1.0.0 | 1 of 3See more | 2,196 |
| ghosthelmforgeVerified publisher | 1.2.13 | 1 of 3See more | 3,067 |
| hoppscotchhelmforgeVerified publisher | 1.1.15 | 1 of 2See more | 2,586 |
| immichhelmforgeVerified publisher | 1.2.13 | 1 of 5See more | 13,985 |
| opensignhelmforgeVerified publisher | 1.0.0 | 1 of 3See more | 70,650 |
| reactive-resumehelmforgeVerified publisher | 1.0.2 | 1 of 4See more | 4,422 |
| strapihelmforgeVerified publisher | 2.3.17 | 1 of 3See more | 2,761 |
| zigbee2mqtthelm-zigbee2mqttVerified publisher | 1.4.2 | 1 of 1See more | 335 |
| browserlessicoretechVerified publisher | 0.18.4 | 1 of 1See more | 1,284 |
| infisicalinfisical-charts | 0.4.2 | 1 of 3See more | 2,830 |
| infisical-standaloneinfisical-charts | 1.11.1 | 1 of 5See more | 2,830 |
| nocodbinseefrlab | 0.2.0 | 1 of 1See more | 257 |
| homebridgejespernohrVerified publisher | 0.2.0 | 1 of 1See more | 25,956 |
| cdashkitwareVerified publisher | 0.21.1 | 1 of 3See more | 12,842 |
| ghostkubernetes-homelab-helm-chartsVerified publisher | 0.3.0 | 1 of 2See more | 2,157 |
| umamikubernetes-homelab-helm-chartsVerified publisher | 0.3.0 | 1 of 3See more | 1,108 |
| homebridgelbenicio-communityVerified publisher | 0.1.15 | 1 of 1See more | 25,956 |
| libredb-studiolibredb-studio-oci | 0.1.102 | 1 of 1See more | 1,560 |
| lynxpromptlynxpromptVerified publisher | 0.1.4 | 1 of 3See more | 980 |
| mcp-kubernetesmcp-helmVerified publisher | 0.2.7 | 1 of 1See more | 7,815 |
| mongo-compassmongo-compass-webVerified publisher | 1.1.4 | 1 of 1See more | 2,384 |
| n8nn8n-openshiftVerified publisher | 1.18.0 | 1 of 1See more | 2,762 |
| ixyneoskop | 3.1.0 | 1 of 1See more | 189 |
| cloakbrowser-mcpobeoneVerified publisher | 0.3.5 | 1 of 1See more | 2,495 |
| firecrawlobeoneVerified publisher | 3.0.21 | 1 of 5See more | 12,005 |
| n8nopenshift | 1.18.0 | 1 of 1See more | 2,762 |
| portalplatform-mesh-portal | 0.21.11 | 1 of 1See more | 203 |
| prismeai-coreprismeai | 1.12.3 | 4 of 7See more | 6,137 |
| rancher-auto-registerrancher-auto-registerVerified publisher | 0.1.0 | 1 of 1See more | 2,790 |
| etherpadredhat-cop | 0.0.8 | 1 of 1See more | 301 |
| web-checkrm3lVerified publisher | 0.2.0 | 1 of 1See more | 8,897 |
| rowflarerowflareVerified publisher | 0.1.0 | 1 of 1See more | 1,244 |
Container images carrying it
97 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| decisionrules/ | 6f6d024a87b8 | fast-uri | 3.1.9 | 3 |
| koenkk/ | addbfb08fcef | fast-uri | 3.1.9 | 3 |
| opensearchproject/ | 4bdb8ded547c | fast-uri | 3.1.9 | 3 |
| verdaccio/ | d394c36d62a6 | fast-uri | 3.1.9 | 3 |
| epamedp/ | ebc7ca162d87 | fast-uri | 3.1.9 | 2 |
| homebridge/ | d2370beb6a02 | fast-uri | 4.2.3 | 2 |
| infisical/ | dbc5be2079b6 | fast-uri | 3.1.9 | 2 |
| koenkk/ | fef0de769dcd | fast-uri | 3.1.9 | 2 |
| library/ | 00032f157262 | fast-uri | 3.1.9 | 2 |
| n8nio/ | 14c4285bc303 | fast-uri | 3.1.9 | 2 |
| patrikx3/ | f19eb45b0694 | fast-uri | 3.1.9 | 2 |
| ghcr.io/ | b434cb9287ee | fast-uri | 3.1.9 | 2 |
| ghcr.io/ | 0cb0177dd278 | fast-uri | 3.1.9 | 2 |
| ghcr.io/ | 7dbff0fe5f53 | fast-uri | 4.2.3 | 2 |
| ghcr.io/ | 85909afc45bd | fast-uri | 3.1.9 | 2 |
| ghcr.io/ | 7e19bbdd2e7d | fast-uri | 3.1.9 | 2 |
| activepieces/ | 26daa5e1807f | fast-uri | 4.2.3 | 1 |
| akeyless/ | 0f582fc294a0 | fast-uri | 3.1.9 | 1 |
| betterdb/ | c4910692b3fc | fast-uri | 3.1.9 | 1 |
| bluerange/ | 90a4e5b92cc6 | fast-uri | 3.1.9 | 1 |
| budibase/ | 44fe6feab985 | fast-uri | 3.1.9 | 1 |
| chainsafe/ | f3d339e96267 | fast-uri | 4.2.3 | 1 |
| continuoussecuritytooling/ | 1be60d1bc942 | fast-uri | 3.1.9 | 1 |
| decisionrules/ | bb3a93224b5a | fast-uri | 3.1.9 | 1 |
| docmost/ | b56947fcfd08 | fast-uri | 3.1.9 | 1 |
| drumsergio/ | e66bb00c2696 | fast-uri | 3.1.9 | 1 |
| epam/ | 7bceacad3de2 | fast-uri | 3.1.9 | 1 |
| etherpad/ | 3d59d633d285 | fast-uri | 3.1.9 | 1 |
| etherpad/ | 98d395769b3b | fast-uri | 3.1.9 | 1 |
| evershop/ | 2acdcd7ed59f | fast-uri | 3.1.9 | 1 |
| flanksource/ | 2bb089c79fc0 | fast-uri | 3.1.9 | 1 |
| flanksource/ | 8d17f0c08b20 | fast-uri | 3.1.9 | 1 |
| gorules/ | 23b5efdea938 | fast-uri | 3.1.9 | 1 |
| growthbook/ | c8a124f55dca | fast-uri | 3.1.9 | 1 |
| growthbook/ | dca716a7bf47 | fast-uri | 3.1.9 | 1 |
| haohanyang/ | f4f8fe4e21f1 | fast-uri | 3.1.9 | 1 |
| helmforge/ | 5a6c2c449840 | fast-uri | 3.1.9 | 1 |
| hoppscotch/ | 3160f5b3acf4 | fast-uri | 3.1.9 | 1 |
| infisical/ | bb8352b71cea | fast-uri | 3.1.9 | 1 |
| kitware/ | 6fab5f5ec6f2 | fast-uri | 3.1.9 | 1 |
| library/ | 8e07c5ec63d9 | fast-uri | 3.1.9 | 1 |
| library/ | c0d83a8d4522 | fast-uri | 3.1.9 | 1 |
| library/ | db4c56c196d6 | fast-uri | 3.1.9 | 1 |
| library/ | 4116dd6a5838 | fast-uri | 3.1.9 | 1 |
| lissy93/ | 5e4feb4acbd5 | fast-uri | 3.1.9 | 1 |
| makeplane/ | fab034a2be8c | fast-uri | 3.1.9 | 1 |
| makeplane/ | 12c33418c1ec | fast-uri | 3.1.9 | 1 |
| makeplane/ | c4a6236c4080 | fast-uri | 3.1.9 | 1 |
| mcp/ | 5ffbf7f0a8aa | fast-uri | 3.1.9 | 1 |
| mitre/ | 06f6e72d416a | fast-uri | 3.1.9 | 1 |