Skip to content
OpenAdvisories

Product · fastify

fastify-passport

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.5
    CVE-2023-29020

    Cross site request forgery token fixation in fastify-passport

    @fastify/passport is a port of passport authentication library for the Fastify ecosystem. The CSRF (Cross-Site Request Forger) protection enforced by the `@fastify/csrf-protection` library, when combined with `@fastify/passport` in affected versions, can be b…

    fastify fastify-passport @fastify/passport npm