Skip to content
OpenAdvisories

Vendor

@fastify/proxy-addr

1 known vulnerabilities.

Products

@fastify/proxy-addr 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.1
    CVE-2026-92395

    @fastify/proxy-addr vulnerable to IP spoofing via IPv4-mapped IPv6 trust subnet

    @fastify/proxy-addr is a Fastify plugin that determines a request's client address behind trusted reverse proxies, and it backs Fastify request.ip and request.ips. In versions 3.0.0 through 5.1.0, a trust subnet written in IPv4-mapped IPv6 notation with an IP…

    @fastify/proxy-addr @fastify/proxy-addr