UlisesGascon

fastify-cli vulnerable to remote code execution via ignored explicit Inspector bind address

@fastify/middie vulnerable to path-scoped middleware bypass via absolute-form request target

fastify vulnerable to request validation bypass via skipped boolean false schemas

undici vulnerable to Denial of Service via unhandled error in WebSocket permessage-deflate decompression

undici vulnerable to Denial of Service via WebSocketStream unclean close

undici vulnerable to cross-origin cache poisoning via missing origin isolation in interceptors

undici vulnerable to caching and replay of unsafe HTTP method responses

undici vulnerable to TLS certificate validation bypass via dropped connect options in BalancedPool

undici vulnerable to response truncation via oversized chunked responses in the dump interceptor

undici vulnerable to cross-user cookie disclosure via Set-Cookie caching in shared caches