CVE-2026-110306
MediumAdvisory
Published 23 Oct 2026In the index since 24 Oct 2026
- Severity
- Medium
- worst across findings
- CVSS
- 6.1
- base score, highest
- EPSS
- 0.002
- 10th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 201
- of 18,232 indexed, latest versions
- Container images
- 196
- deployed by those charts
- Fix available
- 1 of 1
- affected package
fast-uri vulnerable to URI scheme spoofing via percent-encoded scheme decoding
Carried by container images the latest versions of 201 of 18,232 indexed charts deploy, on 196 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| fast-urinpm | 2.1.0, 2.2.0, 2.3.0, 2.4.0+15 more | 2.4.8, 3.1.9, 4.2.3 | 196 |
- OSV records
- GHSA-w74x-v6f9-j3xg
Charts affected
201 by stars
Container images carrying it
196 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| flanksource/ | 2bb089c79fc0 | fast-uri | 3.1.9 | 1 |
| flanksource/ | 8d17f0c08b20 | fast-uri | 3.1.9 | 1 |
| ghostfolio/ | 256c524a6116 | fast-uri | 3.1.9 | 1 |
| ghostfolio/ | e3c6ab53e49b | fast-uri | 3.1.9 | 1 |
| gorules/ | 23b5efdea938 | fast-uri | 3.1.9 | 1 |
| growthbook/ | c8a124f55dca | fast-uri | 3.1.9 | 1 |
| growthbook/ | dca716a7bf47 | fast-uri | 3.1.9 | 1 |
| haohanyang/ | 54f2112602ee | fast-uri | 3.1.9 | 1 |
| haohanyang/ | f4f8fe4e21f1 | fast-uri | 3.1.9 | 1 |
| hecrom/ | 5454b54d5b28 | fast-uri | 3.1.9 | 1 |
| helmforge/ | 5a6c2c449840 | fast-uri | 3.1.9 | 1 |
| hirosystems/ | 9c98b23c1515 | fast-uri | 2.4.8 | 1 |
| hoppscotch/ | 3160f5b3acf4 | fast-uri | 3.1.9 | 1 |
| infisical/ | bb8352b71cea | fast-uri | 3.1.9 | 1 |
| journeyapps/ | 15b8e4dbbab1 | fast-uri | 3.1.9 | 1 |
| kitware/ | 6fab5f5ec6f2 | fast-uri | 3.1.9 | 1 |
| koenkk/ | 60a295b40f4e | fast-uri | 3.1.9 | 1 |
| langgenius/ | c306ac577912 | fast-uri | 3.1.9 | 1 |
| leonardomulticloud/ | e42a341e0299 | fast-uri | 3.1.9 | 1 |
| library/ | 1ef2e532ca4d | fast-uri | 3.1.9 | 1 |
| library/ | 29773d6be407 | fast-uri | 3.1.9 | 1 |
| library/ | 8e07c5ec63d9 | fast-uri | 3.1.9 | 1 |
| library/ | c0d83a8d4522 | fast-uri | 3.1.9 | 1 |
| library/ | db4c56c196d6 | fast-uri | 3.1.9 | 1 |
| library/ | 4116dd6a5838 | fast-uri | 3.1.9 | 1 |
| lissy93/ | 5e4feb4acbd5 | fast-uri | 3.1.9 | 1 |
| makeplane/ | fab034a2be8c | fast-uri | 3.1.9 | 1 |
| makeplane/ | 12c33418c1ec | fast-uri | 3.1.9 | 1 |
| makeplane/ | c4a6236c4080 | fast-uri | 3.1.9 | 1 |
| mautic/ | eb8cc73d97e1 | fast-uri | 3.1.9 | 1 |
| mcp/ | 5ffbf7f0a8aa | fast-uri | 3.1.9 | 1 |
| mintproject/ | 222e3b941a36 | fast-uri | 3.1.9 | 1 |
| mitre/ | 06f6e72d416a | fast-uri | 3.1.9 | 1 |
| n8nio/ | 761374d4eb84 | fast-uri | 3.1.9 | 1 |
| n8nio/ | 87e0bab2c931 | fast-uri | 3.1.9 | 1 |
| n8nio/ | 8b39ed5a2de9 | fast-uri | 3.1.9 | 1 |
| n8nio/ | bf88c3783fc4 | fast-uri | 3.1.9 | 1 |
| n8nio/ | c72fa9f1bd9b | fast-uri | 3.1.9 | 1 |
| n8nio/ | cfe2704ff858 | fast-uri | 3.1.9 | 1 |
| n8nio/ | ed16e560c40e | fast-uri | 3.1.9 | 1 |
| neoskop/ | 326a4d2db1c9 | fast-uri | 3.1.9 | 1 |
| netrisai/ | 6e865080e86c | fast-uri | 3.1.9 | 1 |
| nocodb/ | 6779a4ddedf2 | fast-uri | 3.1.9 | 1 |
| nocodb/ | d9516f0bf546 | fast-uri | 3.1.9 | 1 |
| nocodb/ | e8fee91b205b | fast-uri | 3.1.9 | 1 |
| nodered/ | 10f40d0a83e7 | fast-uri | 3.1.9 | 1 |
| nodered/ | 216e7403aab9 | fast-uri | 3.1.9 | 1 |
| nodered/ | b5adb6c9dd29 | fast-uri | 3.1.9 | 1 |
| nodered/ | d73ae167cb9b | fast-uri | 3.1.9 | 1 |
| obolnetwork/ | 87902178f0e7 | fast-uri | 3.1.9 | 1 |