CVE-2026-110725
LowAdvisory
Published 23 Oct 2026In the index since 24 Oct 2026
- Severity
- Low
- worst across findings
- CVSS
- 3.7
- base score, highest
- EPSS
- 0.003
- 16th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 201
- of 18,232 indexed, latest versions
- Container images
- 196
- deployed by those charts
- Fix available
- 1 of 1
- affected package
fast-uri vulnerable to scheme injection via an unescaped first-segment colon in suffix references
Carried by container images the latest versions of 201 of 18,232 indexed charts deploy, on 196 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| fast-urinpm | 2.1.0, 2.2.0, 2.3.0, 2.4.0+15 more | 2.4.8, 3.1.9, 4.2.3 | 196 |
- OSV records
- GHSA-333x-w4r6-6crp
Charts affected
201 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| connector-helm-chartenmeshed-connectorOfficialVerified publisher | 7.5.7 | 1 of 1See more | 378 |
| edp-installepmdedpOfficialVerified publisher | 3.16.0 | 1 of 7See more | 1,953 |
| krci-portalepmdedpVerified publisher | 0.9.0 | 1 of 1See more | 273 |
| lodestarethereum-helm-chartsVerified publisher | 1.2.2 | 1 of 2See more | 3,369 |
| consent-managerfiware | 0.2.0 | 1 of 1See more | 2,545 |
| facetflanksourceVerified publisher | 0.1.73 | 1 of 1See more | 32,835 |
| flanksource-uiflanksourceVerified publisher | 1.4.354 | 1 of 1See more | 3,657 |
| mission-controlflanksourceVerified publisher | 0.1.339 | 1 of 8See more | 12,093 |
| activepiecesfmjstudios | 0.2.3 | 1 of 1See more | 3,875 |
| qryn-helmgigapipeVerified publisher | 0.1.9 | 1 of 1See more | 3,505 |
| redis-uigin | 0.0.1 | 1 of 1See more | 1,583 |
| opentelemetry-demogpg-dev | 0.33.8 | 2 of 27See more | 199,455 |
| web-checkhajowielandVerified publisher | 1.0.1 | 1 of 1See more | 8,462 |
| automatischhelmforgeVerified publisher | 1.3.12 | 1 of 4See more | 6,668 |
| bytestashhelmforgeVerified publisher | 1.0.4 | 1 of 1See more | 59 |
| documensohelmforgeVerified publisher | 1.0.0 | 1 of 3See more | 2,196 |
| ghosthelmforgeVerified publisher | 1.2.13 | 1 of 3See more | 3,067 |
| ghostfoliohelmforgeVerified publisher | 1.1.2 | 1 of 4See more | 5,372 |
| hoppscotchhelmforgeVerified publisher | 1.1.15 | 1 of 2See more | 2,586 |
| immichhelmforgeVerified publisher | 1.2.13 | 1 of 5See more | 13,985 |
| opensignhelmforgeVerified publisher | 1.0.0 | 1 of 3See more | 70,650 |
| reactive-resumehelmforgeVerified publisher | 1.0.2 | 1 of 4See more | 4,422 |
| ryothelmforgeVerified publisher | 1.0.2 | 1 of 2See more | 7,473 |
| strapihelmforgeVerified publisher | 2.3.17 | 1 of 3See more | 2,761 |
| zigbee2mqtthelm-zigbee2mqttVerified publisher | 1.4.2 | 1 of 1See more | 335 |
| browserlessicoretechVerified publisher | 0.18.4 | 1 of 1See more | 1,284 |
| ilum-unity-catalogilumVerified publisher | 0.1.0 | 1 of 4See more | 68,389 |
| infisicalinfisical-charts | 0.4.2 | 1 of 3See more | 2,830 |
| infisical-standaloneinfisical-charts | 1.11.1 | 1 of 5See more | 2,830 |
| nocodbinseefrlab | 0.2.0 | 1 of 1See more | 257 |
| ghostjanip81-helm-chartsVerified publisher | 0.1.2 | 1 of 1See more | 4,947 |
| n8njanip81-helm-chartsVerified publisher | 0.1.5 | 1 of 1See more | 7,318 |
| homebridgejespernohrVerified publisher | 0.2.0 | 1 of 1See more | 25,956 |
| ghostk8s-home-lab-repo | 4.1.0 | 1 of 1See more | 4,468 |
| k8s-jacoco-operatork8s-jacoco-operator | 0.4.0 | 1 of 4See more | 3,173 |
| k8s-mutating-webhookk8s-mutating-webhook | 0.3.0 | 1 of 2See more | 2,768 |
| k8s-validating-webhookk8s-validating-webhook | 0.4.0 | 1 of 2See more | 2,768 |
| kube-admission-controller-starterk8s-validating-webhook | 0.2.0 | 1 of 2See more | 2,933 |
| cdashkitwareVerified publisher | 0.21.1 | 1 of 3See more | 12,842 |
| ghostkubernetes-homelab-helm-chartsVerified publisher | 0.3.0 | 1 of 2See more | 2,157 |
| seerrkubernetes-homelab-helm-chartsVerified publisher | 0.3.0 | 1 of 1See more | 2,472 |
| umamikubernetes-homelab-helm-chartsVerified publisher | 0.3.0 | 1 of 3See more | 1,108 |
| homebridgelbenicio-communityVerified publisher | 0.1.15 | 1 of 1See more | 25,956 |
| libredb-studiolibredb-studio-oci | 0.1.102 | 1 of 1See more | 1,560 |
| node-redlmatfyVerified publisher | 0.1.6 | 1 of 1See more | 2,316 |
| zigbee2mqttlmatfyVerified publisher | 0.1.14 | 1 of 2See more | 1,557 |
| logtidelogtideVerified publisher | 2.1.14 | 2 of 4See more | 4,334 |
| lynxpromptlynxpromptVerified publisher | 0.1.4 | 1 of 3See more | 980 |
| docker-mailservermailserverVerified publisher | 0.2.65 | 1 of 9See more | 15,496 |
| mauticmautic-chartVerified publisher | 1.0.2 | 1 of 3See more | 50,289 |
Container images carrying it
196 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| flanksource/ | 2bb089c79fc0 | fast-uri | 3.1.9 | 1 |
| flanksource/ | 8d17f0c08b20 | fast-uri | 3.1.9 | 1 |
| ghostfolio/ | 256c524a6116 | fast-uri | 3.1.9 | 1 |
| ghostfolio/ | e3c6ab53e49b | fast-uri | 3.1.9 | 1 |
| gorules/ | 23b5efdea938 | fast-uri | 3.1.9 | 1 |
| growthbook/ | c8a124f55dca | fast-uri | 3.1.9 | 1 |
| growthbook/ | dca716a7bf47 | fast-uri | 3.1.9 | 1 |
| haohanyang/ | 54f2112602ee | fast-uri | 3.1.9 | 1 |
| haohanyang/ | f4f8fe4e21f1 | fast-uri | 3.1.9 | 1 |
| hecrom/ | 5454b54d5b28 | fast-uri | 3.1.9 | 1 |
| helmforge/ | 5a6c2c449840 | fast-uri | 3.1.9 | 1 |
| hirosystems/ | 9c98b23c1515 | fast-uri | 2.4.8 | 1 |
| hoppscotch/ | 3160f5b3acf4 | fast-uri | 3.1.9 | 1 |
| infisical/ | bb8352b71cea | fast-uri | 3.1.9 | 1 |
| journeyapps/ | 15b8e4dbbab1 | fast-uri | 3.1.9 | 1 |
| kitware/ | 6fab5f5ec6f2 | fast-uri | 3.1.9 | 1 |
| koenkk/ | 60a295b40f4e | fast-uri | 3.1.9 | 1 |
| langgenius/ | c306ac577912 | fast-uri | 3.1.9 | 1 |
| leonardomulticloud/ | e42a341e0299 | fast-uri | 3.1.9 | 1 |
| library/ | 1ef2e532ca4d | fast-uri | 3.1.9 | 1 |
| library/ | 29773d6be407 | fast-uri | 3.1.9 | 1 |
| library/ | 8e07c5ec63d9 | fast-uri | 3.1.9 | 1 |
| library/ | c0d83a8d4522 | fast-uri | 3.1.9 | 1 |
| library/ | db4c56c196d6 | fast-uri | 3.1.9 | 1 |
| library/ | 4116dd6a5838 | fast-uri | 3.1.9 | 1 |
| lissy93/ | 5e4feb4acbd5 | fast-uri | 3.1.9 | 1 |
| makeplane/ | fab034a2be8c | fast-uri | 3.1.9 | 1 |
| makeplane/ | 12c33418c1ec | fast-uri | 3.1.9 | 1 |
| makeplane/ | c4a6236c4080 | fast-uri | 3.1.9 | 1 |
| mautic/ | eb8cc73d97e1 | fast-uri | 3.1.9 | 1 |
| mcp/ | 5ffbf7f0a8aa | fast-uri | 3.1.9 | 1 |
| mintproject/ | 222e3b941a36 | fast-uri | 3.1.9 | 1 |
| mitre/ | 06f6e72d416a | fast-uri | 3.1.9 | 1 |
| n8nio/ | 761374d4eb84 | fast-uri | 3.1.9 | 1 |
| n8nio/ | 87e0bab2c931 | fast-uri | 3.1.9 | 1 |
| n8nio/ | 8b39ed5a2de9 | fast-uri | 3.1.9 | 1 |
| n8nio/ | bf88c3783fc4 | fast-uri | 3.1.9 | 1 |
| n8nio/ | c72fa9f1bd9b | fast-uri | 3.1.9 | 1 |
| n8nio/ | cfe2704ff858 | fast-uri | 3.1.9 | 1 |
| n8nio/ | ed16e560c40e | fast-uri | 3.1.9 | 1 |
| neoskop/ | 326a4d2db1c9 | fast-uri | 3.1.9 | 1 |
| netrisai/ | 6e865080e86c | fast-uri | 3.1.9 | 1 |
| nocodb/ | 6779a4ddedf2 | fast-uri | 3.1.9 | 1 |
| nocodb/ | d9516f0bf546 | fast-uri | 3.1.9 | 1 |
| nocodb/ | e8fee91b205b | fast-uri | 3.1.9 | 1 |
| nodered/ | 10f40d0a83e7 | fast-uri | 3.1.9 | 1 |
| nodered/ | 216e7403aab9 | fast-uri | 3.1.9 | 1 |
| nodered/ | b5adb6c9dd29 | fast-uri | 3.1.9 | 1 |
| nodered/ | d73ae167cb9b | fast-uri | 3.1.9 | 1 |
| obolnetwork/ | 87902178f0e7 | fast-uri | 3.1.9 | 1 |