Vulnerabilities

fastify is a web framework for Node.js.

@fastify/http-proxy is a Fastify plugin that proxies HTTP requests to an upstream server under a configured prefix.

@fastify/http-proxy is a Fastify plugin that proxies HTTP requests to an upstream server under a configured prefix.

@fastify/middie is the Express-style middleware engine for Fastify.

fastify is a fast and low overhead web framework for Node.js.

@fastify/static is a Fastify plugin that serves static files from a configured root directory.

fastify is a fast and low-overhead web framework for Node.js.

fastify versions before 5.12.2 implement the case-insensitive nature of HTTP header names by lowercasing names in a route's header schema before compiling it, but the transformation is incomplete: it lowercases the prope…

fastify versions before 5.12.2 decide whether to compile a request schema based on JavaScript truthiness, but JSON Schema Draft 7 defines the boolean false as a valid schema that rejects every instance.

fastify versions >= 4.0.0 and before 5.12.2 can route a malformed URL sent under one plugin prefix to the custom not-found handler of a different sibling plugin, and invoke it without the preHandler hook declared for tha…

fastify versions before 5.12.2 treat the object resolved by a successful Ajv async validator as the value result protocol used by custom validator compilers.

@fastify/middie versions >= 9.1.0 and before 9.3.4 decide whether to run path-scoped middleware by matching against the raw request target, while the Fastify router resolves an absolute-form request target to its path be…

@fastify/http-proxy versions before 11.6.2 do not validate proxied HTTP request paths for backslash based dot-segments before forwarding them to the configured upstream.

@fastify/busboy is a multipart form-data parser for Node.js.

fastify is a fast and low overhead web framework for Node.js.

fastify is a fast and low overhead web framework for Node.js.

@fastify/oauth2 is an OAuth 2.0 plugin for Fastify.

@fastify/multipart is a multipart form-data parser for Fastify.

@fastify/multipart is a multipart form-data parser for Fastify.

@fastify/jwt is a JSON Web Token plugin for Fastify.

@fastify/busboy is a multipart form-data parser.

@fastify/busboy is a multipart form-data parser.

@fastify/static before version 10.1.3 contains an incomplete fix for a previous route guard bypass.

@fastify/aws-lambda version 6.4.0 decorates each Fastify request with request.awsLambda.event and request.awsLambda.context, values that applications are documented to use for authorization decisions such as reading API…

@fastify/rate-limit before 11.2.0 keys rate-limit buckets by the verbatim client IP string returned from request.ip.