Skip to content
OpenAdvisories

Package · npm

@fastify/passport

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Medium 6.5
    CVE-2023-29020

    Cross site request forgery token fixation in fastify-passport

    @fastify/passport is a port of passport authentication library for the Fastify ecosystem. The CSRF (Cross-Site Request Forger) protection enforced by the `@fastify/csrf-protection` library, when combined with `@fastify/passport` in affected versions, can be b…

    fastify fastify-passport @fastify/passport npm
  • High 8.1
    CVE-2023-29019

    Session fixation in fastify-passport

    @fastify/passport is a port of passport authentication library for the Fastify ecosystem. Applications using `@fastify/passport` in affected versions for user authentication, in combination with `@fastify/session` as the underlying session management mechanis…

    fastify fastify-passport @fastify/passport npm