EUVD-2026-70989

fastify vulnerable to request validation bypass via skipped boolean false schemas...

NPM: fastify vulnerable to request validation bypass via skipped boolean false schemas

NPM: fastify vulnerable to request validation bypass via skipped boolean false schemas vulnerability discovered by ? in WordPress Npm fastify versions 5.12.2...

CVE-2026-84469

fastify versions before 5.12.2 decide whether to compile a request schema based on JavaScript truthiness, but JSON Schema Draft 7 defines the boolean false as a valid schema that rejects every instance. When an application assigns false to a route's body, querystring, params, or headers schema to...

CVE-2026-84469 fastify vulnerable to request validation bypass via skipped boolean false schemas

fastify versions before 5.12.2 decide whether to compile a request schema based on JavaScript truthiness, but JSON Schema Draft 7 defines the boolean false as a valid schema that rejects every instance. When an application assigns false to a route's body, querystring, params, or headers schema to...

CVE-2026-84469

fastify versions before 5.12.2 use JavaScript truthiness to decide whether to compile a request schema. Because JSON Schema Draft 7 defines the boolean false as a valid schema that rejects every instance, an application that assigns false to a route's body, querystring, params, or headers schema ...

PT-2026-85467

Name of the Vulnerable Software and Affected Versions fastify versions prior to 5.12.2 Description Fastify incorrectly determines whether to compile a request schema based on JavaScript truthiness. According to JSON Schema Draft 7, a boolean false is a valid schema that rejects all instances...