@fastify/secure-session

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

@fastify/secure-session records in CISA KEV

No @fastify/secure-session vulnerabilities are listed in CISA KEV.

1 record

TI-2026-83784 CVE-2026-117549

LOW 18

@fastify/secure-session is a session plugin for Fastify that stores an encrypted session in a cookie.

CVSS 3.1MEDIUM 4.2 Network Low privileges No interaction EPSS 0.00075 Published 2026-11-02 Fixed in 8.4.2 CWE-347