Skip to content
OpenAdvisories

Product · fastify

fastify-csrf

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.5
    CVE-2021-29624

    Lack of protection against cookie tossing attacks in fastify-csrf

    fastify-csrf is an open-source plugin helps developers protect their Fastify server against CSRF attacks. Versions of fastify-csrf prior to 3.1.0 have a "double submit" mechanism using cookies with an application deployed across multiple subdomains, e.g. "her…

    fastify fastify-csrf fastify-csrf npm