FA
Vendor
@fastify/reply-from
4
CVEs
0
On KEV
1
New 30D
Products
FA10.0
@fastify/reply-from
@fastify/reply-from
3 CVEs0 on KEV1 new
FA8.6
@fastify/http-proxy
@fastify/reply-from
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-107318 | FA @fastify/reply-from @fastify/reply-from | 7.4 | Oct 8 | @fastify/reply-from vulnerable to improper certificate validation in built-in HTTPS transports |
| CVE-2026-16158 | FA @fastify/reply-from @fastify/reply-from | 10.0 | Jul 18 | @fastify/reply-from vulnerable to cross-upstream request routing via URL cache key collision |
| CVE-2026-33805 | FA @fastify/reply-from @fastify/reply-from | 8.6 | Apr 15 | @fastify/reply-from vulnerable to connection header abuse enabling stripping of proxy-added headers |