Skip to content
OpenAdvisories

Vendor

fastify-cli

1 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • High 8.1

    fastify-cli vulnerable to remote code execution via ignored explicit Inspector bind address

    fastify-cli starts the Node.js Inspector when a debug flag is used, but it ignores the explicit bind address the user supplies and binds the Inspector to a broadly reachable address instead of the intended loopback. As a result the debugging interface can be …