CWE-177
CVEs classified under CWE-177, newest first.
2 CVEsRSS
CVE-2026-76172High· 7.5fast-uri: fast-uri: URI parsing flaw enables server-side request forgery and redirects (CVE-2026-76172)
A flaw was found in fast-uri, a software component used for parsing Uniform Resource Identifiers (URIs) in Node.js applications. This vulnerability arises from an issue in how fast-uri processes the scheme part of a URI, specifically when …
▾ TwilightRed Hat · Red Hat OpenShift AI (RHOAI)EPSS 0.23%via CSAF
CVE-2026-67448Medium· 6.5Mailpit is an email testing tool and API for developers
Mailpit is an email testing tool and API for developers. From 1.29.0 until 1.30.6, Mailpit's server/server.go origin middleware checks the raw RequestURI for the /api/ prefix while Go's ServeMux routes using the percent-decoded URL path,…
▾ Sunlitaxllent · github.com/axllent/mailpitEPSS 0.15%via NVD