Skip to content
OpenAdvisories

Product · fastify

fastify-reply-from

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.9
    CVE-2025-66415

    fastify-reply-from bypass of reply forwarding

    fastify-reply-from is a Fastify plugin to forward the current HTTP request to another server. Prior to 12.5.0, by crafting a malicious URL, an attacker could access routes that are not allowed, even though the reply.from is defined for specific routes in @fas…

    fastify fastify-reply-from @fastify/reply-from npm
  • Medium 5.3
    CVE-2023-51701

    @fastify-reply-from JSON Content-Type parsing confusion

    fastify-reply-from is a Fastify plugin to forward the current HTTP request to another server. A reverse proxy server built with `@fastify/reply-from` could misinterpret the incoming body by passing an header `ContentType: application/json ; charset=utf-8`. Th…

    fastify fastify-reply-from @fastify/reply-from npm