Fastify is a web framework with minimal overhead and plugin architecture

fastify vulnerable to request body replacement via an async validation result collision

fastify vulnerable to header validation bypass via incomplete schema case normalization

fastify vulnerable to request validation bypass via skipped boolean false schemas

fastify vulnerable to authentication bypass via malformed URLs reaching encapsulated not-found handlers

fastify vulnerable to Body Schema Validation Bypass via Leading Space in Content-Type Header

Fastify's Content-Type header tab character allows body validation bypass

Fastify is a fast and low overhead web framework, for Node.js

Denial of service in Fastify via Content-Type header

Fastify node module before 0.38.0 is vulnerable to a denial-of-service attack by sending a request with "Content-Type: application/json" and a very large payload

A denial of service vulnerability exists in Fastify v2.14.1 and v3.0.0-rc.4 that allows a malicious user to trigger resource exhaustion (when the allErrors option is used) with…

fastify vulnerable to X-Forwarded-* spoofing under trustProxy hop-count

Fastify request.protocol and request.host spoofable via X-Forwarded-Proto/Host from untrusted connections when trustProxy uses restrictive trust function

fastify vulnerable to Denial of Service via unhandled exception on HTTP/2 trailer responses

fastify vulnerable to schema validation bypass via root primitive coercion mismatch

Fastify's Missing End Anchor in "subtypeNameReg" Allows Malformed Content-Types to Pass Validation

fastify vulnerable to header validation bypass via case-sensitive propertyNames

Fastify Vulnerable to DoS via Unbounded Memory Allocation in sendWebStream