blakeembrey

multiparty vulnerable to Denial of Service via unbounded part-header accumulation

cookies vulnerable to Set-Cookie attribute injection via unvalidated domain and path options

path-to-regexp vulnerable to Denial of Service via sequential optional groups

@fastify/static vulnerable to route guard bypass via encoded path separators

path-to-regexp vulnerable to Regular Expression Denial of Service via multiple wildcards

path-to-regexp vulnerable to Regular Expression Denial of Service via multiple route parameters