Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
fast-uri package may mishandle crafted URLs
published 28 days ago
Summary
The fast-uri library used by matteo.collina/fast-uri and @rootio/fast-uri can incorrectly process specially crafted web addresses, potentially leading to unexpected behavior in applications that rely on it. This issue has been fixed in recent releases of the package. Update to the latest version of fast-uri to protect your software.
What to do
- Update matteo.collina fast-uri to version 3.0.3-aikido.9.
- Update rootio @rootio/fast-uri to version 3.0.3-root.io.9.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Root:npm | matteo.collina | fast-uri |
< 3.0.3-aikido.9 Fix: upgrade to 3.0.3-aikido.9
|
| Root:npm | rootio | @rootio/fast-uri |
< 3.0.3-root.io.9 Fix: upgrade to 3.0.3-root.io.9
|
Original advisory text
AIKIDO-2026-87893 in fast-uri - Patched by Root
Root has patched AIKIDO-2026-87893 in the fast-uri package for Root:npm. Multiple fixed versions available.
Timeline
Published7 Oct 2026
Updated7 Oct 2026
First seen7 Oct 2026
Sources
Track software like this
Free during beta