Known Vulnerabilities for Fastify-static by Fastify
Listed below are 4 of the newest known vulnerabilities associated with "Fastify-static" by "Fastify".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-15074 json | @fastify/static up to and including version 10.1.0 fails to reject dot-dot path segments in request pathnames before the file... | Not Provided | 2026-07-23 | 2026-07-23 |
| CVE-2026-7120 json | @fastify/static evaluates the allowedPath callback before normalizing dot segments and duplicate path separators in the pathn... | Not Provided | 2026-07-23 | 2026-07-23 |
| CVE-2026-6414 json | Not Provided | 2026-04-16 | 2026-04-23 | |
| CVE-2026-6410 json | Not Provided | 2026-04-16 | 2026-04-23 | |
| CVE-2021-22964 json | A redirect vulnerability in the `fastify-static` module version >= 4.2.4 and < 4.4.1 allows remote attackers to redirect Mozi... | 8.8 - HIGH | 2021-10-14 | 2021-10-20 |
| CVE-2021-22963 json | A redirect vulnerability in the fastify-static module version < 4.2.4 allows remote attackers to redirect users to arbitrary ... | 6.1 - MEDIUM | 2021-10-14 | 2021-10-20 |