fastify vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2026-107832Lowfastify: fastify is vulnerable to header validation bypass via case-sensitive propertyNames CVE-2026-92081Mediumfastify: fastify vulnerable to Denial of Service via unhandled exception on HTTP/2 trailer responses CVE-2026-84504Highfastify: fastify vulnerable to request body replacement via an async validation result collision CVE-2026-76169Highfastify: fastify vulnerable to authentication bypass via malformed URLs reaching encapsulated not-found handlers CVE-2026-84469Highfastify: fastify vulnerable to request validation bypass via skipped boolean false schemas CVE-2026-84428Highfastify: fastify vulnerable to header validation bypass via incomplete schema case normalization CVE-2026-16732Mediumfastify: fastify vulnerable to X-Forwarded-* spoofing under trustProxy hop-count CVE-2026-18504Mediumfastify: fastify vulnerable to schema validation bypass via root primitive coercion mismatch CVE-2026-33806Highfastify: Fastify has a Body Schema Validation Bypass via Leading Space in Content-Type Header CVE-2026-3635Mediumfastify: fastify: request.protocol and request.host Spoofable via X-Forwarded-Proto/Host from Untrusted Connections CVE-2026-3419Mediumfastify: Fastify's Missing End Anchor in "subtypeNameReg" Allows Malformed Content-Types to Pass Validation CVE-2026-25224Lowfastify: Fastify Vulnerable to DoS via Unbounded Memory Allocation in sendWebStream CVE-2026-25223Highfastify: Fastify's Content-Type header tab character allows body validation bypass CVE-2025-32442Highfastify: Fastify vulnerable to invalid content-type parsing, which could lead to validation bypass CVE-2022-41919Mediumfastify: Fastify: Incorrect Content-Type parsing can lead to CSRF attack CVE-2022-39288Highfastify: fastify vulnerable to denial of service via malicious Content-Type CVE-2020-8192Mediumfastify: Denial of service in fastify CVE-2018-3711Highfastify: Denial of Service vulnerability with large JSON payloads in fastify

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo