TI-2026-52717 CVE-2026-75021
fastify-cli vulnerable to remote code execution via ignored explicit Inspector bind address
Priority LOW 38
fastify-cli starts the Node.js Inspector when a debug flag is used, but it ignores the explicit bind address the user supplies and binds the Inspector to a broadly reachable address instead of the intended loopback.