FA
Product
Fastify/busyboy
by Fastify · last CVE Aug 21, 2026
3
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Severity mix
Critical 0High 2Medium 1Low 0
Watch

Add Fastify/busyboy to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-19484
7.5
1%
Aug 13
@fastify/busboy vulnerable to Denial of Service via oversized multipart boundary
Affected: 3.1.0 before 3.2.1
CVE-2026-19481
7.5
0%
Aug 13
@fastify/busboy vulnerable to Denial of Service via prototype-named multipart part header
Affected: 1.0.0 before 3.2.1
CVE-2026-74866
5.8
0%
Aug 21
@fastify/busboy vulnerable to CRLF injection via multipart Content-Disposition filename and name
Affected: before 3.2.2
Showing 3