CVE-2026-15144

creationtimestamp| type| source ---|---|--- 2026-07-29 16:15:54+00:00| seen| https://bsky.app/profile/ulisesgascon.com/post/3mrsd4ilqss2c 2026-07-29 19:43:29+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mrsopqnc4r2l...

CVE-2026-15144

The vulnerability CVE-2026-15144 affects @fastify/rate-limit prior to version 11.2.0. It buckets rate-limit keys using the verbatim client IP string from request.ip, allowing an IPv6 client to control a large address range (a /64) and bypass limits by rotating addresses or using different textual...