FA
Vendor
@fastify/oauth2
2
CVEs
0
On KEV
1
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-110008 | FA @fastify/oauth2 @fastify/oauth2 | 4.2 | Oct 19 | @fastify/oauth2 vulnerable to Login CSRF via OAuth state cookie not cleared after callback |
| CVE-2026-18165 | FA @fastify/oauth2 @fastify/oauth2 | 5.4 | Aug 15 | @fastify/oauth2 vulnerable to Login CSRF via plantable OAuth state cookies |