← All credits
FredKSchott
5 vulnerability records and advisories credit this contributor.
CVE-2026-33805
@fastify/reply-from vulnerable to connection header abuse enabling stripping of proxy-added headers
CVE-2026-33804
@fastify/middie vulnerable to middleware bypass via deprecated ignoreDuplicateSlashes option
CVE-2026-6270
@fastify/middie vulnerable to middleware authentication bypass in child plugin scopes
CVE-2026-33808
@fastify/express vulnerable to middleware authentication bypass via URL normalization gaps (duplicate slashes and semicolons)
CVE-2026-33807
@fastify/express vulnerable to middleware path doubling causing authentication bypass in child plugin scopes