Lucene search
+L

3 matches found

Patchstack
Patchstack
•added 2026/09/02 3:13 p.m.•8 views

NPM: fastify vulnerable to schema validation bypass via root primitive coercion mismatch

NPM: fastify vulnerable to schema validation bypass via root primitive coercion mismatch vulnerability discovered by ? in WordPress Npm fastify versions 5.12.1...

5.4CVSS5.9AI score0.00309EPSS
SaveExploits1References6Affected Software1
Cvelist
Cvelist
•added 2026/08/18 8:19 p.m.•30 views

CVE-2026-18504 fastify vulnerable to schema validation bypass via root primitive coercion mismatch

fastify is a fast and low overhead web framework for Node.js. Versions of fastify before 5.12.1 are affected by a schema validation bypass when a request body schema targets a root primitive value. When the schema validates a top-level primitive such as an integer, Ajv can coerce a JSON string in...

5.4CVSS0.00309EPSS
SaveExploits1References2
OSV
OSV
•added 2026/08/18 8:19 p.m.•42 views

CVE-2026-18504 fastify vulnerable to schema validation bypass via root primitive coercion mismatch

fastify is a fast and low overhead web framework for Node.js. Versions of fastify before 5.12.1 are affected by a schema validation bypass when a request body schema targets a root primitive value. When the schema validates a top-level primitive such as an integer, Ajv can coerce a JSON string in...

5.4CVSS5.7AI score
SaveExploits0References4
Rows per page
Query Builder