Skip to content
OpenAdvisories

Package · npm

fastify-static

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.1
    CVE-2021-22963

    URL Redirection to Untrusted Site ('Open Redirect') in fastify-static

    A redirect vulnerability in the fastify-static module version < 4.2.4 allows remote attackers to redirect users to arbitrary websites via a double slash // followed by a domain: http://localhost:3000//google.com/%2e%2e.The issue shows up on all the fastify-st…

    fastify-static npm