fastify fastify

• CVE-2026-120216 Medium 5.9 fastify vulnerable to Denial of Service via uncaught exception on handlerTimeout with streaming responses 0.3%
• CVE-2026-107832 Low 3.7 fastify vulnerable to header validation bypass via case-sensitive propertyNames 0.3%
• CVE-2026-92081 Medium 5.9 fastify vulnerable to Denial of Service via unhandled exception on HTTP/2 trailer responses 0.4%
• CVE-2026-84428 High 7.5 fastify vulnerable to header validation bypass via incomplete schema case normalization 0.5%
• CVE-2026-84469 High 7.5 fastify vulnerable to request validation bypass via skipped boolean false schemas 0.5%
• CVE-2026-76169 High 7.5 fastify vulnerable to authentication bypass via malformed URLs reaching encapsulated not-found handlers 0.5%
• CVE-2026-84504 High 8.1 fastify vulnerable to request body replacement via an async validation result collision 0.4%
• CVE-2026-16732 Medium 6.1 fastify vulnerable to X-Forwarded-* spoofing under trustProxy hop-count 0.2%
• CVE-2026-18504 Medium 5.4 fastify vulnerable to schema validation bypass via root primitive coercion mismatch 0.3%
• CVE-2026-33806 High 7.5 fastify vulnerable to Body Schema Validation Bypass via Leading Space in Content-Type Header 0.4%
• CVE-2026-3635 Medium 6.1 Fastify request.protocol and request.host spoofable via X-Forwarded-Proto/Host from untrusted connections when trustProxy uses restrictive trust function 0.2%
• CVE-2026-3419 Medium 5.3 Fastify's Missing End Anchor in "subtypeNameReg" Allows Malformed Content-Types to Pass Validation 0.4%
• CVE-2026-25223 High 7.5 Fastify's Content-Type header tab character allows body validation bypass 0.9%
• CVE-2026-25224 Low 3.7 Fastify Vulnerable to DoS via Unbounded Memory Allocation in sendWebStream 0.5%
• CVE-2025-32442 High 7.5 Fastify vulnerable to invalid content-type parsing, which could lead to validation bypass 0.7%
• CVE-2022-41919 Medium 4.2 Fastify vulnerable to Cross-Site Request Forgery (CSRF) attack via incorrect content type 0.4%
• CVE-2022-39288 High 7.5 Denial of service in Fastify via Content-Type header 59.2%