FA
Product
@fastify/static
6
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Severity mix
Critical 0High 2Medium 4Low 0
Watch
Add @fastify/static to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-18427 | 7.5 | Aug 6 | @fastify/static vulnerable to route guard bypass via non-canonical path segments Affected: before 10.1.3 |
| CVE-2026-15074 | 7.5 | Jul 23 | @fastify/static vulnerable to route guard bypass via path traversal Affected: before 10.1.1 |
| CVE-2026-6414 | 5.9 | Apr 16 | @fastify/static vulnerable to route guard bypass via encoded path separators Affected: 8.0.0 before 9.1.1 |
| CVE-2026-90982 | 5.3 | Sep 17 | @fastify/static vulnerable to route guard bypass via path case-folding Affected: before 10.1.4 |
| CVE-2026-7120 | 5.3 | Jul 23 | @fastify/static vulnerable to Authorization Bypass via Non-Canonical URL Paths Affected: before 10.1.2 |
| CVE-2026-6410 | 5.3 | Apr 16 | @fastify/static vulnerable to path traversal in directory listing Affected: 8.0.0 before 9.1.1 |
Showing 6