Known Vulnerabilities for Normalize-url by Normalize-url Project
Listed below are 1 of the newest known vulnerabilities associated with "Normalize-url" by "Normalize-url Project".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-104871 json | The Angular SSR is a server-rise rendering tool for Angular applications. Prior to versions 20.3.36, 21.2.23, and 22.1.7, the... | Not Provided | 2026-10-02 | 2026-10-02 |
| CVE-2026-102272 json | PyJWT is a Python implementation of JSON Web Token standards. From 2.13.0 until 2.14.0, HMACAlgorithm.prepare_key in jwt/algo... | Not Provided | 2026-09-28 | 2026-09-29 |
| CVE-2026-100580 json | OpenClaw (npm package 'openclaw') before 2026.7.1 improperly handles case sensitivity in the model-facing cron tool: a mixed-... | Not Provided | 2026-09-26 | 2026-09-26 |
| CVE-2026-100541 json | OpenClaw's Matrix integration (npm package @openclaw/matrix) versions >= 2026.2.2 and < 2026.8.1 lowercase complete Matrix us... | Not Provided | 2026-09-26 | 2026-09-29 |
| CVE-2026-100533 json | OpenClaw versions before 2026.8.1 contain a path traversal vulnerability in the tools.fs.workspaceOnly feature where Unicode ... | Not Provided | 2026-09-26 | 2026-09-29 |
| CVE-2026-93690 json | uri-js through 4.4.1 contains a denial of service vulnerability in the removeDotSegments function that loops infinitely when ... | Not Provided | 2026-09-18 | 2026-09-18 |
| CVE-2026-92957 json | vm2 through 3.11.6 does not normalize `node:`-prefixed builtin specifiers when evaluating user-supplied negative (deny) entri... | Not Provided | 2026-09-17 | 2026-09-26 |
| CVE-2026-86472 json | fast-uri is a dependency-free RFC 3986 URI parser for Node.js, used by Fastify and ajv. In versions before 2.4.7, from 3.0.0 ... | Not Provided | 2026-09-15 | 2026-09-15 |
| CVE-2026-86440 json | Affected versions of MISP insufficiently validate URLs used by dashboard widgets, particularly the Button widget. The widge... | Not Provided | 2026-09-07 | 2026-09-08 |
| CVE-2026-86434 json | league/commonmark versions >= 2.0.0 and < 2.8.4 (patched in 2.9.0) contain a denial of service vulnerability in UniqueSlugNor... | Not Provided | 2026-09-07 | 2026-09-19 |