fastify vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2026-33806Highfastify: Fastify has a Body Schema Validation Bypass via Leading Space in Content-Type Header CVE-2026-3635Mediumfastify: fastify: request.protocol and request.host Spoofable via X-Forwarded-Proto/Host from Untrusted…CVE-2026-3419Mediumfastify: Fastify's Missing End Anchor in "subtypeNameReg" Allows Malformed Content-Types to Pass Validation CVE-2026-25224Lowfastify: Fastify Vulnerable to DoS via Unbounded Memory Allocation in sendWebStream CVE-2026-25223Highfastify: Fastify's Content-Type header tab character allows body validation bypass CVE-2025-32442Highfastify: Fastify vulnerable to invalid content-type parsing, which could lead to validation bypass CVE-2022-41919Mediumfastify: Fastify: Incorrect Content-Type parsing can lead to CSRF attack CVE-2022-39288Highfastify: fastify vulnerable to denial of service via malicious Content-Type CVE-2020-8192Mediumfastify: Denial of service in fastify CVE-2018-3711Highfastify: Denial of Service vulnerability with large JSON payloads in fastify

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo