Login Request a demo
FA
Product
@fastify/oauth2
by @fastify/oauth2 · last CVE Oct 19, 2026
2
CVEs
0
On KEV
5.4
Max CVSS
1
New 30D
Vulnerabilities2In the news0Timeline
Severity mix
Critical 0High 0Medium 2Low 0
Severity
All severities2Critical0High0Medium2Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add @fastify/oauth2 to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-18165
5.4
0%
Aug 15
@fastify/oauth2 vulnerable to Login CSRF via plantable OAuth state cookies
Affected: 7.2.0 before 8.3.0
CVE-2026-110008
4.2
0%
Oct 19
@fastify/oauth2 vulnerable to Login CSRF via OAuth state cookie not cleared after callback
Affected: 7.2.0 before 8.3.2
Showing 2