CVE-2026-18248

creationtimestamp| type| source ---|---|--- 2026-08-03 15:50:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3ms6tyyifgt22 2026-08-03 20:00:35+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3ms7byvyn2b22 2026-08-03 20:15:09+00:00| seen|...

CVE-2026-18248 @fastify/aws-lambda vulnerable to Lambda event spoofing via client-controlled x-apigateway-event header

@fastify/aws-lambda version 6.4.0 decorates each Fastify request with request.awsLambda.event and request.awsLambda.context, values that applications are documented to use for authorization decisions such as reading API Gateway authorizer claims. In the default configuration, the getter that...