1085 matches found
send
@fastify/send Sendは、ファイルシステムからファイルをHTTPレスポンスとしてストリーミングするためのライブラリです。部分応答（Ranges）、条件付きGETネゴシエーション（If-Match、If-Unmodified-Since、If-None-Match、If-Modified-Since）、高いテストカバレッジ、そしてアプリケーションやフレームワークで適切なアクションを取るために利用できる詳細なイベントをサポートしています。 インストール これは npm registry から入手できる Node.js モジュールです。インストールは npm install コマ...
Fastify Swagger-UI - Information Disclosure
fastify-swagger-ui is a Fastify plugin for serving Swagger UI. Prior to 2.1.0, the default configuration of @fastify/swagger-ui without baseDir set will lead to all files in the module's directory being exposed via http routes served by the module. The vulnerability is fixed in v2.1.0. Setting th...
EUVD-2026-57757
@fastify/busboy vulnerable to Denial of Service via prototype-named multipart part header...
EUVD-2026-57759
@fastify/busboy vulnerable to Denial of Service via oversized multipart boundary...
CLSA-2026-1790889495 TuxCare security update for fastify (1 CVE)
TuxCare rebuilt fastify to address 1 CVE. Fixed in 5.2.1-tuxcare.3...
CLSA-2026-1790871227 TuxCare security update for fastify (2 CVEs)
TuxCare rebuilt fastify to address 2 CVEs. Fixed in 5.7.4-tuxcare.3...
CLSA-2026-1790870980 TuxCare security update for fastify (2 CVEs)
TuxCare rebuilt fastify to address 2 CVEs. Fixed in 5.12.1-tuxcare.2...
CLSA-2026-1790863084 TuxCare security update for fastify (1 CVE)
TuxCare rebuilt fastify to address 1 CVE. Fixed in 5.11.3-tuxcare.4...
CLSA-2026-1790857029 TuxCare security update for fastify (2 CVEs)
TuxCare rebuilt fastify to address 2 CVEs. Fixed in 5.12.0-tuxcare.2...
CLSA-2026-1790854816 TuxCare security update for fastify (2 CVEs)
TuxCare rebuilt fastify to address 2 CVEs. Fixed in 5.12.1-tuxcare.1...
EUVD-2026-80315
fastify vulnerable to Denial of Service via unhandled exception on HTTP/2 trailer responses...
fastify vulnerable to Denial of Service via unhandled exception on HTTP/2 trailer responses
Impact fastify crashes with an uncaught ERRHTTP2INVALIDCONNECTIONHEADERS exception when a route that registers a response trailer via reply.trailer is served over HTTP/2. Fastify unconditionally adds the Transfer-Encoding: chunked header when a trailer is set, which is forbidden on HTTP/2, so...
NPM: fastify vulnerable to Denial of Service via unhandled exception on HTTP/2 trailer responses
NPM: fastify vulnerable to Denial of Service via unhandled exception on HTTP/2 trailer responses vulnerability discovered by ? in WordPress Npm fastify versions 5.12.5...
NPM: fastify vulnerable to request body replacement via an async validation result collision
NPM: fastify vulnerable to request body replacement via an async validation result collision vulnerability discovered by ? in WordPress Npm fastify versions 5.12.2...
fastify vulnerable to request body replacement via an async validation result collision
Impact Fastify runs a route's validator and, for a result shaped like value, error , unwraps it: an error becomes a validation failure and value replaces the request part. This convention is intended for synchronous custom compilers for example Joi. A JSON Schema $async validator, however, resolv...
EUVD-2026-70984
fastify vulnerable to request body replacement via an async validation result collision...
EUVD-2026-70988
fastify vulnerable to authentication bypass via malformed URLs reaching encapsulated not-found handlers...
fastify vulnerable to authentication bypass via malformed URLs reaching encapsulated not-found handlers
Impact Fastify routes a malformed URL under one plugin prefix to the custom not-found handler of a different sibling plugin, invoking the handler registered last and skipping the preHandler declared in its setNotFoundHandler. When the request method has no route in the main router, a malformed...
NPM: fastify vulnerable to authentication bypass via malformed URLs reaching encapsulated not-found handlers
NPM: fastify vulnerable to authentication bypass via malformed URLs reaching encapsulated not-found handlers vulnerability discovered by ? in WordPress Npm fastify versions = 4.0.0, 5.12.2...