FA
Product
Fastify-static
7
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 3Medium 4Low 0
Watch
Add Fastify-static to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-22964 | 8.8 | Oct 14 | A redirect vulnerability in the `fastify-static` module version >= 4.2.4 and < 4.4.1 allows remote attackers to redirect Mozilla Firefox users to arbitrary websites via a double… Affected: 4.2.4 before 4.4.1 |
| CVE-2026-18427 | 7.5 | Aug 6 | @fastify/static vulnerable to route guard bypass via non-canonical path segments Affected: before 10.1.3 |
| CVE-2026-15074 | 7.5 | Jul 23 | @fastify/static vulnerable to route guard bypass via path traversal Affected: before 10.1.1 |
Showing 3