F
Vendor security profile
fastify
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs32
Critical7
CISA KEV0
Public exploit1
Patch rate%25
Avg. CVSS7.4
12-month vulnerability rate
0
0
0
1
0
2
0
1
9
11
7
1
CVE KEV
CVE severity distribution
32toplam CVE
Critical7 (22%)
High16 (50%)
Medium8 (25%)
Low1 (3%)
Patch and exploitation view
%25
Verified patch
%0
CISA KEV
%3
Public exploit
8Patch available
0Partial
0Workaround
0Vendor: no patch
24Unknown
Latest vulnerabilities
3.7
CVE-2026-107832
fastify vulnerable to header validation bypass via case-sensitive propertyNames
F
Patch status unknown
7.4
CVE-2026-107318
@fastify/reply-from vulnerable to improper certificate validation in built-in HTTPS transports
@
Patch status unknownEPSS %0
6.8
CVE-2026-107275
@fastify/jwt vulnerable to missing token expiration when temporal options cannot be parsed
@
Patch status unknownEPSS %0
5.3
CVE-2026-90982
@fastify/static vulnerable to route guard bypass via path case-folding
@
Patch status unknownEPSS %1
9.1
CVE-2026-92395
@fastify/proxy-addr vulnerable to IP spoofing via IPv4-mapped IPv6 trust subnet
@
Patch status unknownEPSS %0
8.1
CVE-2026-92087
@fastify/auth vulnerable to Authorization Bypass via order-dependent evaluation of composed auth
@
Patch status unknownEPSS %0
5.9
CVE-2026-92081
fastify vulnerable to Denial of Service via unhandled exception on HTTP/2 trailer responses
F
Patch verifiedEPSS %0
7.5
CVE-2026-84428
Vulnerability in Fastify
F
Patch verifiedEPSS %1
8.1
CVE-2026-84504
Improper input validation in Fastify
F
Patch verifiedEPSS %0
7.5
CVE-2026-84469
Improper input validation in Fastify
F
Patch verifiedEPSS %0