Fastify Fastify-static vulnerabilities

• @fastify/static, fastify fastify-static +1 more @fastify/static vulnerable to route guard bypass via non-canonical path segments CVE-2026-18427 7.5 HighAugust 6, 2026
• @fastify/static, fastify fastify-static +1 more @fastify/static vulnerable to route guard bypass via path traversal CVE-2026-15074 Fix available 7.5 HighJuly 23, 2026
• @fastify/static, fastify fastify-static +1 more @fastify/static vulnerable to Authorization Bypass via Non-Canonical URL Paths CVE-2026-7120 Fix available 5.3 MediumJuly 23, 2026
• @fastify/static, fastify fastify-static +1 more @fastify/static vulnerable to path traversal in directory listing CVE-2026-6410 Fix available 5.3 MediumApril 16, 2026
• @fastify/static, fastify fastify-static +1 more @fastify/static vulnerable to route guard bypass via encoded path separators CVE-2026-6414 Fix available 5.9 MediumApril 16, 2026
• fastify fastify-static DOS and Open Redirect with user input CVE-2021-22964 Fix available 8.8 HighOctober 12, 2021
• fastify fastify-static URL Redirection to Untrusted Site ('Open Redirect') in fastify-static CVE-2021-22963 Fix available 6.1 MediumOctober 5, 2021