0uth (>=1.0.5, <=1.2.1), @___d/common (>=1.0.3, <=1.0.27) +2551 more potentially affected by CVE-2026-33806 via fastify (>=4.29.0, <=5.8.4)

fastify NPM version =4.29.0, =1.0.5, =1.0.3, =0.0.3, =0.1.0, =0.1.0, =0.0.1, =1.0.0, =3.0.0, =0.1.0, =0.0.1, =0.1.0, =0.1.0, =0.2.0 - @agentspec/sidecar 0.1.0 - @agexhq/hub 1.0.0 - @agrume/cli 3.0.0 and more Source cves: CVE-2026-33806 Source advisory: SNYK:JS-FASTIFY-16066793...

CVE-2026-33806 fastify vulnerable to Body Schema Validation Bypass via Leading Space in Content-Type Header

Impact: Fastify applications using schema.body.content for per-content-type body validation can have validation bypassed entirely by prepending a space to the Content-Type header. The body is still parsed correctly but schema validation is skipped. This is a regression introduced in fastify = 5.3...

CVE-2026-33806 fastify vulnerable to Body Schema Validation Bypass via Leading Space in Content-Type Header

Impact: Fastify applications using schema.body.content for per-content-type body validation can have validation bypassed entirely by prepending a space to the Content-Type header. The body is still parsed correctly but schema validation is skipped. This is a regression introduced in fastify = 5.3...

CVE-2026-33806

Impact: Fastify applications using schema.body.content for per-content-type body validation can have validation bypassed entirely by prepending a space to the Content-Type header. The body is still parsed correctly but schema validation is skipped. This is a regression introduced in fastify = 5.3...

@chainlink/external-adapter-framework (>=1.7.5, <=1.7.7), @intuned/runtime (1.3.15) +89 more potentially affected by CVE-2025-32442 +1 more via fastify (4.29.0)

fastify NPM version 4.29.0 is affected by a known vulnerability. The following packages have a transitive dependency on fastify and may be impacted: - @chainlink/external-adapter-framework =1.7.5, =1.3.14-ts-runtime-helpers, =0.0.0-a2a-20250421213654, =3.26.12-beta.2, =0.0.2, =0.3.23, =1.1.26,...

@andesite-lab/andesite-core (>=1.60.2, <=1.61.0), @bechara/crux (>=6.0.0-alpha.1, <=6.6.2) +151 more potentially affected by CVE-2025-32442 +1 more via fastify (>=5.0.0, <=5.3.1)

fastify NPM version =5.0.0, =1.60.2, =6.0.0-alpha.1, =0.2.305, =1.0.6, =1.0.11, =1.9.4, =2.0.0, =1.6.0, =1.6.0, =1.6.0, =1.6.0, =1.6.0, =1.6.0, =1.8.3 - @citrineos/ocpi-base 2.0.1 - @citrineos/ocpi-cdrs 2.0.1 and more Source cves: CVE-2025-32442, CVE-2026-33806 Source advisory:...