FA
Product
Fastify-static
7
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 3Medium 4Low 0
Watch
Add Fastify-static to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-22964 | 8.8 | Oct 14 | A redirect vulnerability in the `fastify-static` module version >= 4.2.4 and < 4.4.1 allows remote attackers to redirect Mozilla Firefox users to arbitrary websites via a double… Affected: 4.2.4 before 4.4.1 |
| CVE-2026-18427 | 7.5 | Aug 6 | @fastify/static vulnerable to route guard bypass via non-canonical path segments Affected: before 10.1.3 |
| CVE-2026-15074 | 7.5 | Jul 23 | @fastify/static vulnerable to route guard bypass via path traversal Affected: before 10.1.1 |
| CVE-2021-22963 | 6.1 | Oct 14 | A redirect vulnerability in the fastify-static module version < 4.2.4 allows remote attackers to redirect users to arbitrary websites via a double slash // followed by a domain:… Affected: before 4.2.4 |
| CVE-2026-6414 | 5.9 | Apr 16 | @fastify/static vulnerable to route guard bypass via encoded path separators Affected: 8.0.0 before 9.1.1 |
| CVE-2026-7120 | 5.3 | Jul 23 | @fastify/static vulnerable to Authorization Bypass via Non-Canonical URL Paths Affected: before 10.1.2 |
| CVE-2026-6410 | 5.3 | Apr 16 | @fastify/static vulnerable to path traversal in directory listing Affected: 8.0.0 before 9.1.1 |
Showing 7