Known Vulnerabilities for Fastify-csrf by Fastify
Listed below are 2 of the newest known vulnerabilities associated with "Fastify-csrf" by "Fastify".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-18165 json | @fastify/oauth2 is an OAuth 2.0 plugin for Fastify. In versions from 7.2.0 up to but not including 8.3.0, the plugin validate... | Not Provided | 2026-08-15 | 2026-08-17 |
| CVE-2026-16732 json | fastify is a fast and low overhead web framework for Node.js. Impact: the fix for CVE-2026-3635 added a guard on the forwarde... | Not Provided | 2026-08-18 | 2026-08-19 |
| CVE-2021-29624 json | fastify-csrf is an open-source plugin helps developers protect their Fastify server against CSRF attacks. Versions of fastify... | 6.5 - MEDIUM | 2021-05-19 | 2022-10-25 |
| CVE-2020-28482 json | This affects the package fastify-csrf before 3.0.0. 1. The generated cookie used insecure defaults, and did not have the http... | 8.8 - HIGH | 2021-01-19 | 2022-06-28 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Fastify | Fastify-csrf | 3.0.1 | |||
| Application | Fastify | Fastify-csrf | 3.0.0 | |||
| Application | Fastify | Fastify-csrf | 2.0.0 | |||
| Application | Fastify | Fastify-csrf | 1.0.4 | |||
| Application | Fastify | Fastify-csrf | 1.0.3 | |||
| Application | Fastify | Fastify-csrf | 1.0.2 | |||
| Application | Fastify | Fastify-csrf | 1.0.1 | |||
| Application | Fastify | Fastify-csrf | 1.0.0 |