FA
Product
Fastify/oauth2
by Fastify · last CVE Aug 15, 2026
1
CVEs
0
On KEV
5.4
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 1Low 0
Watch

Add Fastify/oauth2 to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-18165
5.4
0%
Aug 15
@fastify/oauth2 vulnerable to Login CSRF via plantable OAuth state cookies
Affected: 7.2.0 before 8.3.0
Showing 1