Fastify vulnerabilities
37 CVEs and advisories name Fastify as an affected vendor, newest first. Follow it as a feed.
- CVE-2022-39386fastify-websocket vulnerable to uncaught exception via crash on malformed packet
- CVE-2022-39288Denial of service in Fastify via Content-Type header
- CVE-2022-31142Potential Timing Attack Vector in @fastify/bearer-auth
- CVE-2022-29220No verification of commits origin in github-action-merge-dependabot
- CVE-2021-29624Lack of protection against cookie tossing attacks in fastify-csrf
- CVE-2021-21321Prefix escape
- CVE-2021-21322Prefix escape