Skip to content
OpenAdvisories

Vendor

@fastify/aws-lambda

1 known vulnerabilities.

Products

@fastify/aws-lambda 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.1
    CVE-2026-18248

    @fastify/aws-lambda vulnerable to Lambda event spoofing via client-controlled x-apigateway-event header

    @fastify/aws-lambda version 6.4.0 decorates each Fastify request with request.awsLambda.event and request.awsLambda.context, values that applications are documented to use for authorization decisions such as reading API Gateway authorizer claims. In the defau…

    @fastify/aws-lambda @fastify/aws-lambda