Vendor
fastify-cli
1 known vulnerabilities.
Products
1 result · Clear filters · Feed
-
High 8.1
fastify-cli vulnerable to remote code execution via ignored explicit Inspector bind address
fastify-cli starts the Node.js Inspector when a debug flag is used, but it ignores the explicit bind address the user supplies and binds the Inspector to a broadly reachable address instead of the intended loopback. As a result the debugging interface can be …