Skip to content
OpenAdvisories

Package · npm

fastify-reply-from

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Critical 10.0
    CVE-2021-21321

    Prefix escape

    fastify-reply-from is an npm package which is a fastify plugin to forward the current http request to another server. In fastify-reply-from before version 4.0.2, by crafting a specific URL, it is possible to escape the prefix of the proxied backend service. I…

    fastify fastify-reply-from fastify-reply-from npm