Description

A flaw was found in fast-uri. When processing web addresses, the host canonicalization mechanism can silently strip control characters or drop user information without verifying that the full host input was consumed. A remote attacker can exploit this parsing discrepancy by supplying a specially crafted address to bypass host-based security policies, such as domain blocklists, redirect validations, or proxy routing rules. As a result, applications may inadvertently direct network requests to unintended destinations.

Mitigation

Aliases