@fastify/oauth2 vulnerabilities

Products

• @fastify/oauth2 2

Newest

• @fastify/oauth2 @fastify/oauth2 vulnerable to Login CSRF via OAuth state cookie not cleared after callback CVE-2026-110008 4.2 MediumOctober 19, 2026
• @fastify/oauth2, fastify fastify\/oauth2 +1 more @fastify/oauth2 vulnerable to Login CSRF via plantable OAuth state cookies CVE-2026-18165 4.2 MediumAugust 15, 2026