Read the docs

Fastly

Records8All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

Fastly records in CISA KEV

No Fastly vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Fastly 2 records LOW Js-compute 1 record MEDIUM

Records

8 records

TI-2025-07937 CVE-2025-8671

A mismatch caused by client-triggered server-sent stream resets between HTTP/2…

Priority HIGH 72

A mismatch caused by client-triggered server-sent stream resets between HTTP/2 specifications and the internal architectures of some HTTP/2 implementations may result in excessive server resource consumption leading to d…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.03637 Published 2025-08-13 Fixed in 15-SP5, 15 SP5 +1 CWE-404
TI-2022-18597 CVE-2022-39218 · GHSA-cmr8-5w4c-44v8

Random number seed fixed during compilation

Priority MEDIUM 41

The JS Compute Runtime for Fastly's Compute@Edge platform provides the environment JavaScript is executed in when using the Compute@Edge JavaScript SDK.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00922 Published 2022-09-20 Fixed in 0.5.3 CWE-335
TI-2017-10034 CVE-2017-13761 · GHSA-vpq9-c67q-23fq

The Fastly CDN module before 1.2.26 for Magento2, when used with a third-party…

Priority LOW 31

The Fastly CDN module before 1.2.26 for Magento2, when used with a third-party authentication plugin, might allow remote authenticated users to obtain sensitive information from authenticated sessions via vectors involvi…

CVSS 3.0MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01222 Published 2017-09-14 Fixed in 1.2.26 CWE-200
TI-2015-08022 CVE-2015-10094 · GHSA-qgmh-mvg7-xxq4

Fastly Plugin api.php post cross site scripting

Priority LOW 28

A vulnerability was found in Fastly Plugin up to 0.97 on WordPress.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00545 Published 2023-03-06 No fix listed CWE-79
Open these records in search →