4 matches found
CVE-2026-18248
@fastify/aws-lambda version 6.4.0 decorates each Fastify request with request.awsLambda.event and request.awsLambda.context, values that applications are documented to use for authorization decisions such as reading API Gateway authorizer claims. In the default configuration, the getter that...
CVE-2026-18248 @fastify/aws-lambda vulnerable to Lambda event spoofing via client-controlled x-apigateway-event header
@fastify/aws-lambda version 6.4.0 decorates each Fastify request with request.awsLambda.event and request.awsLambda.context, values that applications are documented to use for authorization decisions such as reading API Gateway authorizer claims. In the default configuration, the getter that...
@leighton-digital/api-test-harness (>=1.1.2, <=1.1.3), @webiny/ai-powerups (>=0.0.0-unstable.9f53ea597d, <=6.5.0-beta.4) +67 more potentially affected by CVE-2026-18248 via @fastify/aws-lambda (6.4.0)
@fastify/aws-lambda NPM version 6.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on @fastify/aws-lambda and may be impacted: - @leighton-digital/api-test-harness =1.1.2, =0.0.0-unstable.9f53ea597d, =0.0.0-unstable.6844005670,...
CVE-2026-18248
@fastify/aws-lambda version 6.4.0 decorates each Fastify request with request.awsLambda.event and request.awsLambda.context, values that applications are documented to use for authorization decisions such as reading API Gateway authorizer claims. In the default configuration, the getter that...