Known Vulnerabilities for Normalize-url by Normalize-url Project
Listed below are 1 of the newest known vulnerabilities associated with "Normalize-url" by "Normalize-url Project".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-86440 json | Affected versions of MISP insufficiently validate URLs used by dashboard widgets, particularly the Button widget. The widge... | Not Provided | 2026-09-07 | 2026-09-08 |
| CVE-2026-86434 json | league/commonmark versions >= 2.0.0 and < 2.8.4 (patched in 2.9.0) contain a denial of service vulnerability in UniqueSlugNor... | Not Provided | 2026-09-07 | 2026-09-07 |
| CVE-2026-84702 json | facefusion through 3.6.1 fails to normalize job identifiers in get_job_file_name, allowing attackers to write files outside t... | Not Provided | 2026-09-02 | 2026-09-02 |
| CVE-2026-84394 json | fast-uri accepts a host that contains an unbalanced or misplaced authority bracket without reporting an error. A host that st... | Not Provided | 2026-09-03 | 2026-09-03 |
| CVE-2026-84292 json | fast-uri serializes the port component of a URI without validating it. When recomposing the authority, the userinfo and host ... | Not Provided | 2026-09-02 | 2026-09-03 |
| CVE-2026-84201 json | appium-mcp-server through 0.1.61 fails to validate or normalize file paths in the write_file and write_files_batch tools, all... | Not Provided | 2026-09-01 | 2026-09-04 |
| CVE-2026-83614 json | xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) DOMParser and XMLSerializer module. Prior to @xmldom/xm... | Not Provided | 2026-09-01 | 2026-09-01 |
| CVE-2026-82673 json | Improper Limitation of a Pathname to a Restricted Directory (Path Traversal) vulnerability in ash-project ash_admin allows wr... | Not Provided | 2026-08-31 | 2026-08-31 |
| CVE-2026-82648 json | WWBN AVideo contains a server-side request forgery filter bypass vulnerability in the isSSRFSafeURL function that fails to no... | Not Provided | 2026-08-30 | 2026-09-02 |
| CVE-2026-82464 json | pac4j-core before 6.5.6 contains an open redirect vulnerability in DefaultLogoutLogic.perform() that accepts backslash-prefix... | Not Provided | 2026-08-29 | 2026-09-01 |