FA
Product
Fastify/http-proxy
4
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 2High 2Medium 0Low 0
Watch
Add Fastify/http-proxy to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-16117 | 10.0 | Jul 18 | @fastify/http-proxy vulnerable to prefix escape via URL-encoded characters Affected: before 11.6.0 |
| CVE-2026-15631 | 10.0 | Jul 18 | @fastify/http-proxy vulnerable to prefix escape via WebSocket path traversal Affected: 9.4.0 before 11.6.0 |
| CVE-2026-33805 | 8.6 | Apr 15 | @fastify/reply-from vulnerable to connection header abuse enabling stripping of proxy-added headers Affected: before 11.4.4 |
| CVE-2026-85124 | 7.5 | Sep 3 | @fastify/http-proxy vulnerable to prefix escape via backslash dot-segments Affected: before 11.6.2 |
Showing 4