Fixed CVEs in fast-uri, qs and adm-zip

[andreasgerstmayr]

Fixed

• CVE-2026-75899 CVE-2026-75931 CVE-2026-75975 CVE-2026-76172 CVE-2026-84292 (fast-uri)
• CVE-2026-82417 (qs)
• CVE-2026-82417 (adm-zip)

[coderabbitai]

---

_{Comment @coderabbitai help to get the list of available commands.}

[zhuje]

Is this a duplicate of #305?

[andreasgerstmayr]

Is this a duplicate of #305?

It's targeting another branch. Maybe #305 could have been a cherry-pick, unfortunately the dependency cherry-picks have conflicts many times :/

[zhuje]

/lgtm

[zhuje]

/retest

[openshift-ci]

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: zhuje

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details

Needs approval from an approver in each of these files:

• OWNERS [zhuje]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[openshift-ci]

@andreasgerstmayr: The following tests failed, say /retest to rerun all failed tests or /retest-required to rerun all mandatory failed tests:

Test name	Commit	Details	Required	Rerun command
ci/prow/upstream-ocp-5.0-amd64-aws-e2e	e675488	link	true	/test upstream-ocp-5.0-amd64-aws-e2e
ci/prow/upstream-amd64-aws-e2e	e675488	link	true	/test upstream-amd64-aws-e2e
ci/prow/upstream-ocp-4.23-amd64-gcp-e2e	e675488	link	true	/test upstream-ocp-4.23-amd64-gcp-e2e

Full PR test history. Your PR dashboard.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.