FA
Product
fastify
18
CVEs
0
On KEV
8.8
Max CVSS
1
New 30D
Severity mix
Critical 0High 10Medium 6Low 2
Watch
Add fastify to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-8192 | 6.5 | Jul 30 | A denial of service vulnerability exists in Fastify v2.14.1 and v3.0.0-rc.4 that allows a malicious user to trigger resource exhaustion (when the allErrors option is used) with… Affected: 2.14.1; 3.0.0 |
| CVE-2026-16732 | 6.1 | Aug 18 | fastify vulnerable to X-Forwarded-* spoofing under trustProxy hop-count Affected: 5.8.3 before 5.12.1 |
| CVE-2026-3635 | 6.1 | Mar 23 | Fastify request.protocol and request.host spoofable via X-Forwarded-Proto/Host from untrusted connections when trustProxy uses restrictive trust function Affected: through 5.8.2 |
| CVE-2026-92081 | 5.9 | Sep 16 | fastify vulnerable to Denial of Service via unhandled exception on HTTP/2 trailer responses Affected: before 5.12.5 |
| CVE-2026-18504 | 5.3 | Aug 18 | fastify vulnerable to schema validation bypass via root primitive coercion mismatch Affected: before 5.12.1 |
| CVE-2026-3419 | 5.3 | Mar 6 | Fastify's Missing End Anchor in "subtypeNameReg" Allows Malformed Content-Types to Pass Validation Affected: 5.7.2 before 5.8.1 |
Showing 6