FA
Product
@fastify/http-proxy
3
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 2High 1Medium 0Low 0
Watch
Add @fastify/http-proxy to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-16117 | 10.0 | Jul 18 | @fastify/http-proxy vulnerable to prefix escape via URL-encoded characters Affected: before 11.6.0 |
| CVE-2026-15631 | 10.0 | Jul 18 | @fastify/http-proxy vulnerable to prefix escape via WebSocket path traversal Affected: 9.4.0 before 11.6.0 |
| CVE-2026-85124 | 7.5 | Sep 3 | @fastify/http-proxy vulnerable to prefix escape via backslash dot-segments Affected: before 11.6.2 |
Showing 3