Known Vulnerabilities for Fastify-csrf by Fastify
Listed below are 2 of the newest known vulnerabilities associated with "Fastify-csrf" by "Fastify".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-3635 json | Summary When trustProxy is configured with a restrictive trust function (e.g., a specific IP like trustProxy: '10.0.0.1', a s... | Not Provided | 2026-03-23 | 2026-03-23 |
| CVE-2021-29624 json | fastify-csrf is an open-source plugin helps developers protect their Fastify server against CSRF attacks. Versions of fastify... | 6.5 - MEDIUM | 2021-05-19 | 2022-10-25 |
| CVE-2020-28482 json | This affects the package fastify-csrf before 3.0.0. 1. The generated cookie used insecure defaults, and did not have the http... | 8.8 - HIGH | 2021-01-19 | 2022-06-28 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Fastify | Fastify-csrf | 3.0.1 | |||
| Application | Fastify | Fastify-csrf | 3.0.0 | |||
| Application | Fastify | Fastify-csrf | 2.0.0 | |||
| Application | Fastify | Fastify-csrf | 1.0.4 | |||
| Application | Fastify | Fastify-csrf | 1.0.3 | |||
| Application | Fastify | Fastify-csrf | 1.0.2 | |||
| Application | Fastify | Fastify-csrf | 1.0.1 | |||
| Application | Fastify | Fastify-csrf | 1.0.0 |