The fast-uri library has a vulnerability where it accepts hosts with unbalanced or misplaced brackets in the URI authority without error. This can cause discrepancies between the host parsed by fast-uri and the host resolved by Node.js URL clients, potentially leading to security bypasses in host-based access controls. The issue is fixed in fast-uri versions 2.4.6, 3.1.7, and 4.1.4.