FA
Product
@fastify/session
by @fastify/session · last CVE Oct 27, 2026
1
CVEs
0
On KEV
3.7
Max CVSS
1
New 30D
Severity mix
Critical 0High 0Medium 0Low 1
Watch

Add @fastify/session to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-117499
New
3.7–Oct 27
@fastify/session vulnerable to session revocation bypass via a logout race condition
Affected: before 11.1.6
Showing 1