Skip to content
OpenAdvisories

Vendor

fastify

37 known vulnerabilities.

Products

fastify 17 fastify-reply-from 3 fastify-express 3 fastify-passport 2 fastify-multipart 2 fastify-swagger-ui 1 fastify-bearer-auth 1 github-action-merge-dependabot 1 csrf-protection 1 session 1 middie 1 fastify-csrf 1 fastify-secure-session 1 fastify-http-proxy 1 fastify-websocket 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Low 3.7
    CVE-2026-107832

    fastify vulnerable to header validation bypass via case-sensitive propertyNames

    fastify is a fast and low overhead web framework for Node.js. In versions 5.12.2 through 5.12.5, the routine that lowercases header names declared in a route schema does not lowercase the enum or const header names nested inside a propertyNames subschema. As …

    fastify fastify fastify npm
  • Low 3.7
    CVE-2026-25224

    Fastify Vulnerable to DoS via Unbounded Memory Allocation in sendWebStream

    Fastify is a fast and low overhead web framework, for Node.js. Prior to version 5.7.3, a denial-of-service vulnerability in Fastify’s Web Streams response handling can allow a remote client to exhaust server memory. Applications that return a ReadableStream (…

    fastify fastify fastify npm