Copyright © 2012 Red Hat, Inc. All rights reserved.
Important
2026-08-24T09:58:07
fast-uri: fast-uri: Server-side request forgery via malformed IPv6 normalization
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
CWE-918
fast-uri is a URI parser for Node.js. Its custom parser for bracketed IPv6 literals does not validate the complete IPv6 grammar, so invalid trailing text in an authority can be silently discarded and a malformed attacker-controlled host is turned into a different valid IPv6 destination. For example, a bracketed literal with invalid trailing characters is normalized to the unspecified address, which a Node HTTP client then connects to a local service over loopback, and other malformed literals collapse to private-range addresses. No error is set on the parsed result, so an application checking the error field cannot detect the rewrite. An application that normalizes untrusted URLs before outbound requests, redirects, proxy routing, or address-policy enforcement can be redirected to a local or private IPv6 target, giving a server-side request forgery and address-policy bypass primitive. The affected versions are 2.3.1 up to but not including 2.4.5, 3.0.0 up to but not including 3.1.6, and 4.0.0 up to but not including 4.1.3. The issue is fixed in 2.4.5, 3.1.6, and 4.1.3, which validate bracketed IP literals against the full grammar and mark malformed literals as authority errors. Users should upgrade to a patched version.
A flaw was found in fast-uri, a URI parser for Node.js. Its custom parser for bracketed IPv6 literals does not fully validate the IPv6 grammar, allowing invalid trailing text in an authority to be silently discarded. This can lead to a malformed, attacker-controlled host being normalized into a different, valid IPv6 destination, such as a local or private IPv6 target. An application normalizing untrusted URLs before outbound requests, redirects, or proxy routing could be redirected, resulting in a server-side request forgery (SSRF) and address-policy bypass.
Red Hat Advanced Cluster Management for Kubernetes 2.16
2026-09-15T00:00:00Z
RHSA-2026:67542
rhacm2/console-rhel9:1788880980
Red Hat Advanced Cluster Management for Kubernetes 2.17
2026-09-15T00:00:00Z
RHSA-2026:67543
rhacm2/console-rhel9:1788883472
Red Hat Ansible Automation Platform 2.1
2026-09-08T00:00:00Z
RHSA-2026:65118
ansible-automation-platform/automation-portal:1788775748
Red Hat Ansible Automation Platform 2.2
2026-09-08T00:00:00Z
RHSA-2026:65155
ansible-automation-platform/automation-portal:1788783591
Red Hat Ansible Automation Platform 2.7
2026-09-14T00:00:00Z
RHSA-2026:67279
ansible-automation-platform-27/mcp-server-rhel9:1788915736
Red Hat Developer Hub 1.9
2026-09-21T00:00:00Z
RHSA-2026:69248
rhdh/rhdh-hub-rhel9:1789554285
Red Hat Discovery 2
2026-08-31T00:00:00Z
RHSA-2026:61783
discovery/discovery-ui-rhel9:1788206196
Red Hat Edge Manager 1.1
2026-09-16T00:00:00Z
RHSA-2026:68044
rhem/flightctl-ui-ocp-rhel10:1789486226
Red Hat Edge Manager 1.1
2026-09-16T00:00:00Z
RHSA-2026:68044
rhem/flightctl-ui-rhel10:1789486181
Red Hat Edge Manager 1.1
2026-09-16T00:00:00Z
RHSA-2026:68253
rhem/flightctl-ui-ocp-rhel9:1789486446
Red Hat Edge Manager 1.2
2026-09-16T00:00:00Z
RHSA-2026:68006
rhem/flightctl-ui-ocp-rhel10:1789485920
Red Hat Edge Manager 1.2
2026-09-16T00:00:00Z
RHSA-2026:68006
rhem/flightctl-ui-rhel10:1789488111
Red Hat Edge Manager 1.2
2026-09-16T00:00:00Z
RHSA-2026:68254
rhem/flightctl-ui-ocp-rhel9:1789486476
Red Hat Edge Manager 1.2
2026-09-16T00:00:00Z
RHSA-2026:68254
rhem/flightctl-ui-rhel9:1789486750
Red Hat Hardened Images
2026-08-29T00:00:00Z
RHSA-2026:60855
grafana13-1-main-13.1.3-0.3.hum1
Red Hat Hardened Images
2026-08-29T00:00:00Z
RHSA-2026:60856
grafana13-2-main-13.2.0-0.1.2.hum1
Red Hat Hardened Images
2026-08-29T00:00:00Z
RHSA-2026:60866
grafana12-4-main-12.4.9-0.4.hum1
Red Hat Migration Toolkit 1.8
2026-09-17T00:00:00Z
RHSA-2026:68681
rhmtc/openshift-migration-ui-rhel8:1789546373
Red Hat OpenShift Dev Spaces 3.30
2026-09-17T00:00:00Z
RHSA-2026:68754
devspaces/dashboard-rhel9:1789162884
Red Hat Satellite 6.18
2026-09-17T00:00:00Z
RHSA-2026:68756
satellite/iop-host-inventory-frontend-rhel9:1789613107
Red Hat Satellite 6.18
2026-09-17T00:00:00Z
RHSA-2026:68762
satellite/iop-advisor-frontend-rhel9:1789659573
Red Hat Satellite 6.18
2026-09-17T00:00:00Z
RHSA-2026:68765
satellite/iop-vulnerability-frontend-rhel9:1789660969
Red Hat Satellite 6.18
2026-09-17T00:00:00Z
RHSA-2026:68766
satellite/iop-remediations-rhel9:1789615095
Red Hat Satellite 6.19
2026-09-17T00:00:00Z
RHSA-2026:68747
satellite/iop-remediations-rhel9:1789615593
Red Hat Satellite 6.19
2026-09-17T00:00:00Z
RHSA-2026:68748
satellite/iop-advisor-frontend-rhel9:1789659565
Red Hat Satellite 6.19
2026-09-17T00:00:00Z
RHSA-2026:68750
satellite/iop-host-inventory-frontend-rhel9:1789624519
Red Hat Satellite 6.19
2026-09-17T00:00:00Z
RHSA-2026:68755
satellite/iop-vulnerability-frontend-rhel9:1789660983
Migration Toolkit for Applications 8
Affected
mta/mta-solution-server-rhel9
Multicluster Engine for Kubernetes
Affected
multicluster-engine/console-mce-rhel9
Network Observability Operator
Affected
network-observability/network-observability-console-plugin-pf5-rhel9
Network Observability Operator
Affected
network-observability/network-observability-console-plugin-rhel9
OpenShift Lightspeed
Affected
openshift-lightspeed/lightspeed-agentic-console-rhel9
OpenShift Lightspeed
Affected
openshift-lightspeed/lightspeed-console-plugin-419-rhel9
OpenShift Lightspeed
Affected
openshift-lightspeed/lightspeed-console-plugin-pf5-rhel9
OpenShift Lightspeed
Affected
openshift-lightspeed/lightspeed-console-plugin-rhel9
OpenShift Pipelines
Affected
openshift-pipelines/pipelines-console-plugin-pf5-rhel9
OpenShift Pipelines
Affected
openshift-pipelines/pipelines-console-plugin-rhel9
OpenShift Pipelines
Affected
openshift-pipelines/pipelines-hub-ui-rhel8
OpenShift Pipelines
Affected
openshift-pipelines/pipelines-hub-ui-rhel9
OpenShift Serverless
Not affected
openshift-serverless-1/kn-eventing-integrations-aws-ddb-streams-source-rhel9
OpenShift Serverless
Not affected
openshift-serverless-1/kn-eventing-integrations-aws-s3-sink-rhel9
OpenShift Serverless
Not affected
openshift-serverless-1/kn-eventing-integrations-aws-s3-source-rhel9
OpenShift Serverless
Not affected
openshift-serverless-1/kn-eventing-integrations-aws-sns-sink-rhel9
OpenShift Serverless
Not affected
openshift-serverless-1/kn-eventing-integrations-aws-sqs-sink-rhel9
OpenShift Serverless
Not affected
openshift-serverless-1/kn-eventing-integrations-aws-sqs-source-rhel9
OpenShift Serverless
Not affected
openshift-serverless-1/kn-eventing-integrations-log-sink-rhel9
OpenShift Serverless
Not affected
openshift-serverless-1/kn-eventing-integrations-timer-source-rhel9
OpenShift Serverless
Affected
openshift-serverless-1/kn-eventing-integrations-transform-jsonata-rhel9
Red Hat AMQ Broker 7
Not affected
amq-broker-bin.zip
Red Hat AMQ Broker 7
Not affected
amq-broker-maven-repository.zip
Red Hat Ansible Automation Platform 2
Will not fix
ansible-automation-platform-24/lightspeed-rhel8
Red Hat Ansible Automation Platform 2
Will not fix
ansible-automation-platform-25/lightspeed-rhel8
Red Hat Ansible Automation Platform 2
Will not fix
ansible-automation-platform-26/lightspeed-rhel9
Red Hat Ansible Automation Platform 2
Not affected
automation-gateway
Red Hat Ansible Automation Platform 2
Not affected
automation-platform-ui
Red Hat build of Apicurio Registry 3
Affected
apicurio/apicurio-registry-ui-rhel8
Red Hat Build of Podman Desktop
Affected
rh-podman-desktop.git
Red Hat Connectivity Link 1
Not affected
rhcl-1/rhcl-console-plugin-rhel9
Red Hat Data Grid 8
Will not fix
redhat-datagrid-maven-repository.zip
Red Hat Developer Hub
Not affected
rhdh/red-hat-developer-hub-backstage-plugin-lightspeed
Red Hat Developer Hub
Affected
rhdh/red-hat-developer-hub-backstage-plugin-lightspeed-backend
Red Hat Developer Hub
Affected
rhdh/red-hat-developer-hub-backstage-plugin-orchestrator
Red Hat Developer Hub
Affected
rhdh/red-hat-developer-hub-backstage-plugin-orchestrator-backend
Red Hat Developer Hub
Affected
rhdh/red-hat-developer-hub-backstage-plugin-orchestrator-backend-module-loki
Red Hat Developer Hub
Affected
rhdh/red-hat-developer-hub-backstage-plugin-orchestrator-form-widgets
Red Hat Developer Hub
Affected
rhdh/red-hat-developer-hub-backstage-plugin-scaffolder-backend-module-orchestrator
Red Hat Enterprise Linux 10
Affected
cockpit-image-builder
Red Hat Enterprise Linux 10
Not affected
dotnet8.0
Red Hat Enterprise Linux 10
Not affected
grafana
Red Hat Enterprise Linux 10
Not affected
grafana-pcp
Red Hat Enterprise Linux 10
Affected
linux-sgx
Red Hat Enterprise Linux 10
Affected
rh-podman-desktop
Red Hat Enterprise Linux 8
Not affected
dotnet8.0
Red Hat Enterprise Linux 9
Not affected
dotnet8.0
Red Hat Enterprise Linux 9
Affected
linux-sgx
Red Hat Enterprise Linux AI (RHEL AI) 3
Affected
rhelai3/bootc-cuda-rhel9
Red Hat Enterprise Linux AI (RHEL AI) 3
Affected
rhelai3/bootc-gaudi-rhel9
Red Hat Enterprise Linux AI (RHEL AI) 3
Affected
rhelai3/bootc-rocm-rhel9
Red Hat Enterprise Linux AI (RHEL AI) 3
Affected
rhelai3/disk-image-cuda-rhel9
Red Hat Hardened Images
Not affected
dotnet8.0
Red Hat Hardened Images
Not affected
jaeger
Red Hat Hardened Images
Not affected
prometheus3.13
Red Hat OpenShift AI (RHOAI)
Affected
rhoai/odh-core-bff-rhel9
Red Hat OpenShift AI (RHOAI)
Affected
rhoai/odh-dashboard-operator-rhel9
Red Hat OpenShift AI (RHOAI)
Affected
rhoai/odh-dashboard-rhel9
Red Hat OpenShift AI (RHOAI)
Affected
rhoai/odh-feature-server-rhel9
Red Hat OpenShift AI (RHOAI)
Affected
rhoai/odh-mlflow-rhel9
Red Hat OpenShift AI (RHOAI)
Affected
rhoai/odh-mod-arch-agent-ops-rhel9
Red Hat OpenShift AI (RHOAI)
Affected
rhoai/odh-mod-arch-automl-rhel9
Red Hat OpenShift AI (RHOAI)
Affected
rhoai/odh-mod-arch-autorag-rhel9
Red Hat OpenShift AI (RHOAI)
Affected
rhoai/odh-mod-arch-eval-hub-rhel9
Red Hat OpenShift AI (RHOAI)
Affected
rhoai/odh-mod-arch-gen-ai-rhel9
Red Hat OpenShift AI (RHOAI)
Affected
rhoai/odh-mod-arch-maas-rhel9
Red Hat OpenShift AI (RHOAI)
Affected
rhoai/odh-mod-arch-mlflow-rhel9
Red Hat OpenShift AI (RHOAI)
Affected
rhoai/odh-mod-arch-model-registry-rhel9
Red Hat OpenShift AI (RHOAI)
Affected
rhoai/odh-workbench-codeserver-datascience-cpu-py312-rhel9
Red Hat OpenShift Container Platform 4
Affected
openshift4/nmstate-console-plugin-rhel9
Red Hat OpenShift Container Platform 4
Not affected
openshift4/ose-console-rhel9
Red Hat OpenShift Container Platform 4
Affected
openshift4/ose-monitoring-plugin-rhel9
Red Hat Openshift Data Foundation 4
Affected
odf4/mcg-core-rhel9
Red Hat Openshift Data Foundation 4
Affected
odf4/ocs-client-console-rhel9
Red Hat Openshift Data Foundation 4
Affected
odf4/odf-console-rhel9
Red Hat Openshift Data Foundation 4
Affected
odf4/odf-multicluster-console-rhel9
Red Hat OpenShift Dev Spaces
Affected
devspaces/code-rhel9
Red Hat Quay 3
Not affected
quay/quay-rhel8
Red Hat Quay 3
Not affected
quay/quay-rhel9
Red Hat Satellite 6
Affected
nodejs-compression-webpack-plugin
Red Hat Satellite 6
Affected
nodejs-mini-css-extract-plugin
Red Hat Satellite 6
Affected
nodejs-webpack
Secrets Management Console for Red Hat OpenShift
Will not fix
external-secrets-management/console-plugin-rhel9
Self-service automation portal 2
Affected
ansible-automation-platform/bootc-automation-portal-rhel9
https://www.cve.org/CVERecord?id=CVE-2026-75975
https://nvd.nist.gov/vuln/detail/CVE-2026-75975
https://cna.openjsf.org/security-advisories.html
https://github.com/fastify/fast-uri/security/advisories/GHSA-f65p-4m7j-42xc