Description

A flaw was found in fast-uri. A remote attacker could exploit this vulnerability to trigger cross-site scripting (XSS) by providing crafted input to applications that serialize or normalize relative Uniform Resource Identifiers (URIs) using the suffix reference option. Because the library fails to properly escape colons in the first path segment of relative paths, the generated string can be misinterpreted by downstream components as an absolute URI with an executable scheme.

Mitigation

Aliases