Skip to content
OpenAdvisories

Product · fastify

csrf-protection

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.3
    CVE-2023-27495

    Bypass of CSRF protection in the presence of predictable userInfo in @fastify/csrf-protection

    @fastify/csrf-protection is a plugin which helps protect Fastify servers against CSRF attacks. The CSRF protection enforced by the @fastify/csrf-protection library in combination with @fastify/cookie can be bypassed from network and same-site attackers under …

    fastify csrf-protection @fastify/csrf-protection npm