Skip to content
OpenAdvisories

Package · npm

fastify-static

2 known vulnerabilities.

1 result · Clear filters · Feed

  • High 8.8

    DOS and Open Redirect with user input

    A redirect vulnerability in the `fastify-static` module version >= 4.2.4 and < 4.4.1 allows remote attackers to redirect Mozilla Firefox users to arbitrary websites via a double slash `//` followed by a domain: `http://localhost:3000//a//youtube.com/%2e%2e%2f…