← All credits
climba03003
13 vulnerability records and advisories credit this contributor.
CVE-2026-19474
@fastify/multipart vulnerable to Denial of Service via temporary file leak on aborted upload
CVE-2026-16732
fastify vulnerable to X-Forwarded-* spoofing under trustProxy hop-count
CVE-2026-16158
@fastify/reply-from vulnerable to cross-upstream request routing via URL cache key collision
CVE-2026-15144
@fastify/rate-limit vulnerable to rate-limit bypass via IPv6 address rotation
CVE-2026-15631
@fastify/http-proxy vulnerable to prefix escape via WebSocket path traversal
CVE-2026-33806
fastify vulnerable to Body Schema Validation Bypass via Leading Space in Content-Type Header
CVE-2026-33805
@fastify/reply-from vulnerable to connection header abuse enabling stripping of proxy-added headers
CVE-2026-33804
@fastify/middie vulnerable to middleware bypass via deprecated ignoreDuplicateSlashes option
CVE-2026-6270
@fastify/middie vulnerable to middleware authentication bypass in child plugin scopes
CVE-2026-6410
@fastify/static vulnerable to path traversal in directory listing