fastify Latest High & Critical Vulnerabilities
Latest High & Critical vulnerabilities published by fastify
Vulnerability Published:
🗓️ Published
- Anytime
Sort By:
🗓️ Published Date
- Descending
Remote Code Execution Vulnerability in fastify-cli by Fastify
CVE-2026-75021Fastify-cliFastify-cli8.1HIGHHTTP Header Name Bypass in Fastify by Fastify, Inc.
CVE-2026-84428FastifyFastify7.5HIGHValidation Bypass in Fastify Affects Application Security
CVE-2026-84469FastifyFastify7.5HIGHRouting Vulnerability in fastify Affecting Plugin Encapsulation
CVE-2026-76169FastifyFastify7.5HIGHUnauthorized Data Modification in Fastify by Low-Privilege Users
CVE-2026-84504FastifyFastify8.1HIGHPath Handling Flaw in @fastify/express Affects Middleware Security
CVE-2026-33807Fastify@fastify/express9.1CRITICALPath Authentication Bypass in Fastify/Express Middleware Affects Fastify Implementation
CVE-2026-33808Fastify@fastify/express9.1CRITICALVulnerability in Fastify Applications Affecting Content-Type Validation
CVE-2026-33806FastifyFastify7.5HIGHValidation Bypass Vulnerability in Fastify Web Framework for Node.js
CVE-2026-25223FastifyFastify7.5HIGHMiddleware Bypass in Fastify Plugin by Fastify
CVE-2026-22037FastifyFastify-express8.4HIGHMiddleware Bypass Vulnerability in @fastify/middie Plugin
CVE-2026-22031FastifyMiddie8.4HIGHValidation Bypass in Fastify Web Framework Affecting Node.js Applications
CVE-2025-32442FastifyFastify7.5HIGHImproper Temporary File Management in Fastify Multipart Plugin
CVE-2025-24033FastifyFastify-multipart7.5HIGHFestify Secure Session Plugin Patches Issue Allowing Unlimited Session Renewal
CVE-2024-31999FastifyFastify-secure-session7.4HIGHSession fixation in fastify-passport
CVE-2023-29019FastifyFastify-passport8.1HIGH@fastify/multipart vulnerable to DoS due to unlimited number of parts
CVE-2023-25576FastifyFastify-multipart7.5HIGHfastify-websocket vulnerable to uncaught exception via crash on malformed packet
CVE-2022-39386FastifyFastify-websocket7.5HIGHDenial of service in Fastify via Content-Type header
CVE-2022-39288FastifyFastifyEPSS 59%7.5HIGHPotential Timing Attack Vector in @fastify/bearer-auth
CVE-2022-31142FastifyFastify-bearer-auth7.5HIGHDenial of Service (DoS)
CVE-2021-23597FastifyFastify-multipart7.5HIGHRedirect Vulnerability in fastify-static Module by Fastify
CVE-2021-22964FastifyHttps://github.com/fas...8.8HIGHPrefix escape
CVE-2021-21321FastifyFastify-reply-from10CRITICALPrefix escape
CVE-2021-21322FastifyFastify-http-proxy10CRITICALPrototype Pollution Flaw in Fastify Multipart by Fastify
CVE-2020-8136FastifyFastify-multipart7.5HIGH