#fastify

Fastify

Latest news about Fastify: context, sources and what to do.

2 articles

Cybersecurity

CVE-2026-117518: CVSS 8.2 Path Traversal Vulnerability in Fastify Reply-From

Discover CVE-2026-117518, a CVSS 8.2 vulnerability in Fastify reply-from plugin allowing upstream path traversal via backslash dot-segments.

CVSS 8.2 HIGHCVE-2026-117518See vendor advisoryNo patch · mitigation

2 days ago2 min read

Cybersecurity

Critical Vulnerability CVE-2026-120213 in @fastify/http-proxy Exposes Routes

Discover critical CVE-2026-120213 in @fastify/http-proxy versions 9.0.0 to 11.6.5, allowing path-restriction bypass. Learn how to update to version 11.6.6.

CVSS 9.1 CRITICALCVE-2026-120213See vendor advisoryNo patch · mitigation

2 days ago1 min read