Skip to content
OpenAdvisories

Vendor

@fastify/auth

1 known vulnerabilities.

Products

@fastify/auth 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.1
    CVE-2026-92087

    @fastify/auth vulnerable to Authorization Bypass via order-dependent evaluation of composed auth

    @fastify/auth is a Fastify plugin that composes multiple authentication and authorization strategies into a single route guard. In versions 5.0.0 through 5.1.0, when strategies are composed with the relation "or" option together with the run "all" option and …

    @fastify/auth @fastify/auth