Skip to content
OpenAdvisories

Vendor

fastify

37 known vulnerabilities.

Products

fastify 17 fastify-reply-from 3 fastify-express 3 fastify-passport 2 fastify-multipart 2 fastify-swagger-ui 1 fastify-bearer-auth 1 github-action-merge-dependabot 1 csrf-protection 1 session 1 middie 1 fastify-csrf 1 fastify-secure-session 1 fastify-http-proxy 1 fastify-websocket 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.4
    CVE-2026-18504 Public exploit

    fastify vulnerable to schema validation bypass via root primitive coercion mismatch

    fastify is a fast and low overhead web framework for Node.js. Versions of fastify before 5.12.1 are affected by a schema validation bypass when a request body schema targets a root primitive value. When the schema validates a top-level primitive such as an in…

    fastify fastify fastify npm