← Back

Fastify

fastify

63 CVEs • 22 products

Products (22)

Click to collapse
Toggle
Fastify
fastify
16 CVEs
Fastify Static
fastify-static
7 CVEs
Fastify/middie
fastify/middie
7 CVEs
Fastify Multipart
fastify-multipart
5 CVEs
Fastify/http Proxy
fastify/http-proxy
4 CVEs
Reply From
reply-from
3 CVEs
Fastify/express
fastify/express
3 CVEs
Fastify/busyboy
fastify/busyboy
3 CVEs
Fastify Csrf
fastify-csrf
2 CVEs
Passport
passport
2 CVEs
Github Action Merge Dependabot
github_action_merge_dependabot
1 CVE
Bearer Auth
bearer-auth
1 CVE
Websocket
websocket
1 CVE
Csrf Protection
csrf-protection
1 CVE
Oauth2
oauth2
1 CVE
Fastify/accepts Serializer
fastify/accepts-serializer
1 CVE
Fastify/forwarded
fastify/forwarded
1 CVE
Fastify/rate Limit
fastify/rate-limit
1 CVE
Fastify/reply From
fastify/reply-from
1 CVE
Fastify/aws Lambda
fastify/aws-lambda
1 CVE
Fastify/oauth2
fastify/oauth2
1 CVE
Fastify/jwt
fastify/jwt
1 CVE

CVEs (63)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2020-8192
1Fastify
1Fastify
Jun 17, 2026
Jul 30, 2020
N/A· v4
6.5 MEDIUM· v3
4.0 MEDIUM· v2
A denial of service vulnerability exists in Fastify v2.14.1 and v3.0.0-rc.4 that allows a malicious user to trigger resource exhaustion (when the allErrors option is used) with specially crafted schemas.
CVE-2020-8136
1Fastify
1Fastify Multipart
Jun 17, 2026
Mar 20, 2020
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
Prototype pollution vulnerability in fastify-multipart < 1.0.5 allows an attacker to crash fastify applications parsing multipart requests by sending a specially crafted request.
CVE-2018-3711
1Fastify
1Fastify
Nov 21, 2024
Jun 7, 2018
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
Fastify node module before 0.38.0 is vulnerable to a denial-of-service attack by sending a request with "Content-Type: application/json" and a very large payload.