fastify vulnerabilities (npm)
18 vulnerabilities.
-
fastifynpm fastify vulnerable to header validation bypass via case-sensitive propertyNames 3.7 Low -
fastifynpm fastify vulnerable to Denial of Service via unhandled exception on HTTP/2 trailer responses 5.9 Medium -
fastifynpm fastify vulnerable to header validation bypass via incomplete schema case normalization 7.5 High -
fastifynpm fastify vulnerable to request validation bypass via skipped boolean false schemas 7.5 High -
fastifynpm fastify vulnerable to authentication bypass via malformed URLs reaching encapsulated not-found handlers 7.5 High -
fastifynpm fastify vulnerable to request body replacement via an async validation result collision 8.1 High -
fastifynpm fastify vulnerable to X-Forwarded-* spoofing under trustProxy hop-count 6.1 Medium -
fastifynpm fastify vulnerable to schema validation bypass via root primitive coercion mismatch 5.4 Medium -
fastifynpm Fastify request.protocol and request.host spoofable via X-Forwarded-Proto/Host from untrusted connections when trustProxy uses restrictive trust function 6.1 Medium -
fastifynpm Fastify's Missing End Anchor in "subtypeNameReg" Allows Malformed Content-Types to Pass Validation 5.3 Medium -
fastifynpm Fastify Vulnerable to DoS via Unbounded Memory Allocation in sendWebStream 3.7 Low -
fastifynpm Fastify's Content-Type header tab character allows body validation bypass 7.5 High -
fastifynpm fastify vulnerable to Body Schema Validation Bypass via Leading Space in Content-Type Header 7.5 High -
fastifynpm Fastify vulnerable to invalid content-type parsing, which could lead to validation bypass 7.5 High -
fastifynpm Fastify vulnerable to Cross-Site Request Forgery (CSRF) attack via incorrect content type 4.2 Medium -
fastifynpm Denial of service in Fastify via Content-Type header 7.5 High -
fastifynpm Denial of service in fastify 6.5 Medium -
fastifynpm Denial of Service vulnerability with large JSON payloads in fastify 7.5 High