RE
Product
Reply-from
by Fastify · last CVE Apr 15, 2026
3
CVEs
0
On KEV
8.6
Max CVSS
0
New 30D
Severity mix
Critical 0High 2Medium 1Low 0
Watch

Add Reply-from to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-33805
8.6
0%
Apr 15
@fastify/reply-from vulnerable to connection header abuse enabling stripping of proxy-added headers
Affected: before 12.6.2
CVE-2023-51701
7.5
0%
Jan 8
fastify-reply-from is a Fastify plugin to forward the current HTTP request to another server
Affected: before 9.6.0
Showing 2