FA
Product
@fastify/static
by @fastify/static · last CVE Sep 17, 2026
6
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Severity mix
Critical 0High 2Medium 4Low 0
Watch

Add @fastify/static to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-18427
7.5
1%
Aug 6
@fastify/static vulnerable to route guard bypass via non-canonical path segments
Affected: before 10.1.3
CVE-2026-15074
7.5
1%
Jul 23
@fastify/static vulnerable to route guard bypass via path traversal
Affected: before 10.1.1
Showing 2