Skip to content

fix: Updates to fast-uri 3.1.2 to fix vulns CVE-2026-6321 and CVE-2026-6322 - #177

Merged
kibertoad merged 1 commit into
fastify:mainfrom
jjghali:fix/fixes-vulnerabilities
May 29, 2026
Merged

kibertoad merged 1 commit into
fastify:mainfrom
jjghali:fix/fixes-vulnerabilities

Conversation

@jjghali

@jjghali jjghali commented May 29, 2026

Copy link
Copy Markdown
Contributor

Updates fast-uri to fix vulns CVE-2026-6321 and CVE-2026-6322

Testing

Ran unit tests

uses TypeScript 6.0.3 with baseline TSConfig

pass ./types/index.tst.ts

Targets:    1 passed, 1 total
Test files: 1 passed, 1 total
Assertions: 54 passed, 54 total
Duration:   0.4s

Checklist

@kibertoad
kibertoad merged commit 1d080b3 into fastify:main May 29, 2026
14 checks passed
@Fdawgs

Fdawgs commented May 31, 2026

Copy link
Copy Markdown
Member

Not needed due to semver usage.

@kibertoad

Copy link
Copy Markdown
Member

@Fdawgs it is still somewhat useful as it forces update for everyone rather than delegate the responsibility on user to ipdate themselves, while most likely they don't even have it as a direct dep.

and it costs us nothing.

@jjghali
jjghali deleted the fix/fixes-vulnerabilities branch June 15, 2026 13:42
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants