Known Vulnerabilities for Fastify by Vendor
Listed below are 10 of the newest known vulnerabilities associated with "Fastify" by "Vendor".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-34076 json | Clerk JavaScript is the official JavaScript repository for Clerk authentication. In @clerk/hono from versions 0.1.0 to before... | Not Provided | 2026-04-01 | 2026-04-01 |
| CVE-2026-33808 json | Impact@fastify/express v4.0.4 and earlier fails to normalize URLs before passing them to Express middleware when Fastify rout... | Not Provided | 2026-04-15 | 2026-04-15 |
| CVE-2026-33807 json | @fastify/express v4.0.4 and earlier contains a path handling bug in the onRegister function that causes middleware paths to b... | Not Provided | 2026-04-15 | 2026-04-15 |
| CVE-2026-33806 json | Impact: Fastify applications using schema.body.content for per-content-type body validation can have validation bypassed ent... | Not Provided | 2026-04-15 | 2026-04-15 |
| CVE-2026-33805 json | @fastify/reply-from v12.6.1 and earlier and @fastify/http-proxy v11.4.3 and earlier process the client's Connection header af... | Not Provided | 2026-04-15 | 2026-04-15 |
| CVE-2026-33804 json | @fastify/middie versions 9.3.1 and earlier are vulnerable to middleware bypass when the deprecated Fastify ignoreDuplicateSla... | Not Provided | 2026-04-16 | 2026-04-16 |
| CVE-2026-6414 json | @fastify/static versions 8.0.0 through 9.1.0 decode percent-encoded path separators (%2F) before filesystem resolution, while... | Not Provided | 2026-04-16 | 2026-04-16 |
| CVE-2026-6410 json | @fastify/static versions 8.0.0 through 9.1.0 allow path traversal when directory listing is enabled via the list option. The ... | Not Provided | 2026-04-16 | 2026-04-16 |
| CVE-2026-6270 json | @fastify/middie versions 9.3.1 and earlier do not register inherited middleware directly on child plugin engine instances. Wh... | Not Provided | 2026-04-16 | 2026-04-16 |
| CVE-2026-3635 json | Summary When trustProxy is configured with a restrictive trust function (e.g., a specific IP like trustProxy: '10.0.0.1', a s... | Not Provided | 2026-03-23 | 2026-03-23 |