CVE-2026-6322
EUVD-2026-2724805.05.2026, 11:16
fast-uri normalize() decoded percent-encoded authority delimiters inside the host component and then re-emitted them as raw delimiters during serialization. A host that combined an allowed domain, an encoded at-sign, and a different domain was re-emitted with the at-sign as a raw userinfo separator, changing the URI's authority to the second domain. Applications that normalize untrusted URLs before host allowlist checks, redirect validation, or outbound request routing can be steered to a different authority than the input appeared to specify. Versions <= 3.1.1 are affected. Update to 3.1.2 or later.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| openjsf | fast-uri | 𝑥 < 3.1.2 |
𝑥
= Vulnerable software versions
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
| Vendor | Product | Version | Source |
|---|---|---|---|
| Red Hat | Red Hat Ansible Automation Platform 2.5 for RHEL 8 | 0:2.5.20260715-1.el8ap ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Ansible Automation Platform 2.5 for RHEL 9 | 0:2.5.20260715-1.el9ap ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Ansible Automation Platform 2.6 for RHEL 9 | 0:2.6.10-1.el9ap ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Enterprise Linux 10 | 0:1.1.1-1.el10_2 ≤ 𝑥 < * | ADP |
| Red Hat | Cluster Observability Operator 1.5.0 | 1782840519 ≤ 𝑥 < * | ADP |
| Red Hat | Cluster Observability Operator 1.5.0 | 1782839981 ≤ 𝑥 < * | ADP |
| Red Hat | Cluster Observability Operator 1.5.0 | 1782839193 ≤ 𝑥 < * | ADP |
| Red Hat | Cluster Observability Operator 1.5.0 | 1782838753 ≤ 𝑥 < * | ADP |
| Red Hat | Cluster Observability Operator 1.5.0 | 1782839279 ≤ 𝑥 < * | ADP |
| Red Hat | Cluster Observability Operator 1.5.0 | 1782840539 ≤ 𝑥 < * | ADP |
| Red Hat | Cluster Observability Operator 1.5.0 | 1782841925 ≤ 𝑥 < * | ADP |
| Red Hat | Cluster Observability Operator 1.5.0 | 1782838476 ≤ 𝑥 < * | ADP |
| Red Hat | Cluster Observability Operator 1.5.0 | 1782839996 ≤ 𝑥 < * | ADP |
| Red Hat | Cluster Observability Operator 1.5.0 | 1782839494 ≤ 𝑥 < * | ADP |
| Red Hat | multicluster engine for Kubernetes 2.11 | 1780910888 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.16 | 1780600823 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Ansible Automation Platform 2.6 | 1782761510 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Ansible Automation Platform 2.6 | 1782721130 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Ansible Automation Platform 2.7 | 1783919486 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Developer Hub 1.10 | 1783448184 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Developer Hub 1.9 | 1781187342 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Discovery 2 | 1782166952 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Discovery 2 | 1788206196 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Edge Manager 1.0 | 1783502765 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Edge Manager 1.0 | 1783502438 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Edge Manager 1.1 | 1784194938 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Edge Manager 1.1 | 1784194574 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Edge Manager 1.1 | 1784126822 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Edge Manager 1.1 | 1784127736 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Hardened Images | 13.1.3-0.3.hum1 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Migration Toolkit 1.8 | 1783690532 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Migration Toolkit for Applications 8.2 | 1784109883 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift AI 3.4 | 1787347991 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift AI 3.4 | 1787250508 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift AI 3.4 | 1787251550 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift AI 3.4 | 1786611759 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift AI 3.4 | 1787251250 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift AI 3.4 | 1786612219 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift AI 3.4 | 1787250617 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift AI 3.4 | 1787121387 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | 1787031447 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift Container Platform 4.19 | 1782880472 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift Container Platform 4.19 | 1786486822 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift Container Platform 4.20 | 1782313844 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift Container Platform 4.20 | 1783602326 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift Container Platform 4.21 | 1782308519 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift Container Platform 4.21 | 1782914001 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift Container Platform 4.21 | 1783502338 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift Container Platform 4.22 | 1782224390 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift Container Platform 4.22 | 1782224316 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift Container Platform 4.22 | 1782224099 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.18 | 1786705347 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.18 | 1786706101 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.18 | 1786705558 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.18 | 1786705646 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.18 | 1786706138 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.18 | 1786705741 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.18 | 1786705777 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.18 | 1786705802 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.18 | 1786705938 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.18 | 1786706577 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.18 | 1786706125 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.18 | 1786706177 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.18 | 1786706188 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.18 | 1786706679 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.18 | 1786706357 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.18 | 1786706612 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.18 | 1786706644 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.18 | 1786706659 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.18 | 1786706880 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.19 | 1786701839 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.19 | 1786701555 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.19 | 1786702052 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.19 | 1786702559 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.19 | 1786702713 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.19 | 1786702264 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.19 | 1786702448 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.19 | 1786702276 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.19 | 1786702440 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.19 | 1786702315 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.19 | 1786703071 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.19 | 1786702563 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.19 | 1786702636 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.19 | 1786702623 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.19 | 1786703137 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.19 | 1786702716 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.19 | 1786702872 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.19 | 1786702949 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.19 | 1786702917 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.19 | 1786703143 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.20 | 1786627460 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.20 | 1786626399 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.20 | 1786628235 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.20 | 1786627106 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.20 | 1786629761 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.20 | 1786627559 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.20 | 1786687918 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.20 | 1786629478 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.20 | 1786628142 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.20 | 1786631508 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.20 | 1786628053 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.20 | 1786627382 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.20 | 1786627430 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.20 | 1786629076 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.20 | 1786627469 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.20 | 1786644072 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.20 | 1786688215 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.20 | 1786628340 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.20 | 1786628623 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.20 | 1786632256 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.20 | 1786628935 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.20 | 1786629548 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.21 | 1786627281 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.21 | 1786627168 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.21 | 1786628067 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.21 | 1786628657 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.21 | 1786627792 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.21 | 1786698066 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.21 | 1786627823 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.21 | 1786628998 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.21 | 1786697443 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.21 | 1786628916 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.21 | 1786630412 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.21 | 1786629773 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.21 | 1786630739 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.21 | 1786628303 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.21 | 1786629324 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.21 | 1786628605 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.21 | 1786631438 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.21 | 1786697305 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.21 | 1786644678 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.21 | 1786634168 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.21 | 1786633448 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.21 | 1786634233 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.21 | 1786633986 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.21 | 1786633677 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.21 | 1786644362 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.22 | 1787057250 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.22 | 1787057964 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.22 | 1787057603 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.22 | 1787058450 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.22 | 1787057989 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.22 | 1787059853 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.22 | 1787057849 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.22 | 1787060257 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.22 | 1787058278 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.22 | 1787058658 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.22 | 1787058706 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.22 | 1787058403 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.22 | 1787059072 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.22 | 1787058807 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.22 | 1787058588 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.22 | 1787058970 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.22 | 1787059538 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.22 | 1787059616 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.22 | 1787061098 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.22 | 1787059085 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.22 | 1787059621 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.22 | 1787059386 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.22 | 1787060080 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.22 | 1787060105 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.22 | 1787059493 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.22 | 1787060201 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.22 | 1787060274 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Openshift Data Foundation 4.22 | 1787061554 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Quay 3.10 | 1782487717 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Quay 3.12 | 1781937357 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Quay 3.16 | 1783955846 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Quay 3.17 | 1786181981 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Quay 3.9 | 1781878070 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Satellite 6.18 | 1781032495 ≤ 𝑥 < * | ADP |
Debian Releases
Ubuntu Releases
Common Weakness Enumeration
References