Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
GitHub Actions fast-uri could allow unauthorized code execution
published 15 days ago
Summary
The fast-uri component used in GitHub Actions could be tricked into running malicious code, potentially compromising your automation workflows. This risk has been fixed in the latest fast-uri version 3.1.4‑tuxcare.5. Update to this version as soon as possible to protect your systems.
What to do
- Update GitHub Actions fast-uri to version 3.1.4-tuxcare.5.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| TuxCare:npm | GitHub Actions | fast-uri |
>= 3.1.4-tuxcare.0, < 3.1.4-tuxcare.5 Fix: upgrade to 3.1.4-tuxcare.5
|
Original advisory text
TuxCare security update for fast-uri (1 CVE)
TuxCare rebuilt fast-uri to address 1 CVE. Fixed in 3.1.4-tuxcare.5.
Timeline
Published20 Oct 2026
Updated20 Oct 2026
First seen20 Oct 2026
Sources
CLSA-2026-1792517925 · OSV
Track software like this
Free during beta