Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

KEV

Categories

All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other

Tag groups

All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15

Popular tags (Top 40)

Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337

Filtering: Tag: fastify Clear

ID	Title	Severity	Tags	Detected
CVE-2026-15144	Vulnerability in fastify (CVE-2026-15144) vulnerability in fastify (CVE-2026-15144). Risk of unauthorized operations or information disclosure.	High	Cwe 307 Cwe 770 Fastify Fastifyrate Limit	1 month ago
CVE-2026-18174	Vulnerability in fastify (CVE-2026-18174) vulnerability in fastify (CVE-2026-18174). Risk of unauthorized operations or information disclosure.	Medium	Cwe 20 Cwe 184 Fastify Fastifyforwarded	1 month ago
CVE-2026-7120	Vulnerability in @fastify/static (CVE-2026-7120) vulnerability in @fastify/static (CVE-2026-7120). Risk of unauthorized operations or information disclosure. Exploitable via ``allowedPath``. Mitigation: upgrade to `10.1.2` or later.	Medium	Cwe 180 Fastify Fastify Static	1 month ago
CVE-2026-15074	@fastify/static vulnerable to route guard bypass via path traversal @fastify/static vulnerable to route guard bypass via path traversal	High	Cwe 22 Fastify Nodejs Path Traversal +1	1 month ago
CVE-2026-16117	Vulnerability in fastify (CVE-2026-16117) vulnerability in fastify (CVE-2026-16117). Confidential information can be exposed externally.	Critical	Cwe 20 Fastify Fastifyhttp Proxy	1 month ago
CVE-2026-16158	Impact: @fastify/reply-from versions from 8.3.1 up to but not including 12.6.4 build the internal URL cache key by concatenating the destination and source path without a delimiter. Different destinat... Impact: @fastify/reply-from versions from 8.3.1 up to but not including 12.6.4 build the internal URL cache key by concatenating the destination and source path without a delimiter. Different destination and source pairs can therefore produce the same key while resolving to different upstream URLs....	High	Cwe 441 Fastify Nodejs Fastifyreply From	1 month ago
CVE-2026-15631	Impact: @fastify/http-proxy versions from 9.4.0 up to and including 11.5.0 fail to validate the resolved WebSocket destination path against the configured rewrite prefix. The WebSocket routing path in... Impact: @fastify/http-proxy versions from 9.4.0 up to and including 11.5.0 fail to validate the resolved WebSocket destination path against the configured rewrite prefix. The WebSocket routing path in WebSocketProxy.findUpstream resolves the destination via the WHATWG URL constructor, which collapse...	High	Path Traversal Cwe 22 Fastify Nodejs +2	1 month ago
CVE-2026-14198	Vulnerability in fastify (CVE-2026-14198) vulnerability in fastify (CVE-2026-14198). Confidential information can be exposed externally.	Critical	Cwe 436 Fastify Fastifymiddie	1 month ago
CVE-2026-14181	Vulnerability in dos (CVE-2026-14181) vulnerability in dos (CVE-2026-14181). Risk of unauthorized operations or information disclosure.	High	JavaScript Denial of Service Cwe 248 Fastify +1	1 month ago
CVE-2026-6556	Vulnerability in express (CVE-2026-6556) vulnerability in express (CVE-2026-6556). Confidential information can be exposed externally.	Critical	Express Cwe 285 Fastify Fastifyexpress	1 month ago
CVE-2026-7768	Vulnerability in @fastify/accepts-serializer (CVE-2026-7768) vulnerability in @fastify/accepts-serializer (CVE-2026-7768). Risk of unauthorized operations or information disclosure. Exploitable via ``Accept``. Mitigation: upgrade to `6.0.4` or later.	High	JavaScript Cwe 770 Fastify Fastifyaccepts Serializer	3 months ago
CVE-2026-33804	Vulnerability in fastify (CVE-2026-33804) vulnerability in fastify (CVE-2026-33804). Confidential information can be exposed externally.	High	Cwe 436 Fastify Fastifymiddie	4 months ago
CVE-2026-6270	Vulnerability in fastify (CVE-2026-6270) vulnerability in fastify (CVE-2026-6270). Confidential information can be exposed externally.	Critical	Cwe 436 Fastify Fastifymiddie	4 months ago
CVE-2026-33805	Vulnerability in @fastify/reply-from (CVE-2026-33805) vulnerability in @fastify/reply-from (CVE-2026-33805). Data can be tampered with by attackers. Exploitable via ``Connection``. Mitigation: upgrade to `12.6.2` or later.	High	Cwe 644 Fastify Fastifyhttp Proxy Reply From +1	4 months ago
CVE-2026-33808	Vulnerability in @fastify/express (CVE-2026-33808) vulnerability in @fastify/express (CVE-2026-33808). Confidential information can be exposed externally. Exploitable via `GET //admin/dashboard`. Mitigation: upgrade to `4.0.3` or later.	Critical	Express Cwe 436 Fastify Fastifyexpress	4 months ago
CVE-2026-33807	Vulnerability in express (CVE-2026-33807) vulnerability in express (CVE-2026-33807). Confidential information can be exposed externally.	Critical	Express Cwe 436 Fastify Fastifyexpress	4 months ago
CVE-2026-33806	Vulnerability in fastify (CVE-2026-33806) vulnerability in fastify (CVE-2026-33806). Data can be tampered with by attackers.	High	Cwe 1287 Cwe 1289 Fastify	4 months ago
CVE-2026-2880	Vulnerability in fastify (CVE-2026-2880) vulnerability in fastify (CVE-2026-2880). Confidential information can be exposed externally.	Critical	Cwe 20 Fastify Fastifymiddie	6 months ago
CVE-2026-25223	Vulnerability in fastify (CVE-2026-25223) vulnerability in fastify (CVE-2026-25223). Data can be tampered with by attackers.	High	JavaScript Cwe 436 Cwe 179 Fastify	6 months ago
CVE-2026-22031	Vulnerability in fastify (CVE-2026-22031) vulnerability in fastify (CVE-2026-22031). Confidential information can be exposed externally.	High	Cwe 177 Fastify Fastifymiddie	7 months ago

Vulnerabilities

🍪 About cookies