[GHSA] GHSA-5jgf-p345-68v8 (high) — fast-uri vulnerable to host confusion via skipped IDN canonicalization on scheme-relative references

GHSA-5jgf-p345-68v8 Severity: high CVE: CVE-2026-75931

fast-uri vulnerable to host confusion via skipped IDN canonicalization on scheme-relative references

### Impact

`fast-uri` canonicalizes a host to its ASCII form only when the input carries an explicit scheme. When `resolve()` resolves a scheme-relative reference (`//host/`) against a scheme-bearing base, it still emits the host verbatim ev