https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T00:16:02.238646+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-33732 CVE-2026-33732 — srvx is vulnerable to middleware bypass via absolute URI in request line 2026-10-07T00:16:02.256081+00:00

Affected: h3js srvx

srvx is a universal server based on web standards. Prior to version 0.11.13, a pathname parsing discrepancy in srvx's `FastURL` allows middleware bypass on the Node.js adapter when a raw HTTP request uses an absolute URI with a non-standard scheme (e.g. `file://`). Starting in version 0.11.13, the `FastURL` constructor now deopts to native `URL` for any string not starting with `/`, ensuring consistent pathname resolution.