Advisories · Technology
@fastify/http-proxy.
Every CVE that names @fastify/http-proxy among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 9.1 CriticalCritical · CVSS 9+
@fastify/http-proxy vulnerable to prefix escape via decoded route parameters
- @fastify/http-proxy
- Path traversal
- CWE-436
- CVSS 5.9 Medium
@fastify/http-proxy vulnerable to prefix escape via percent-encoded backslash dot-segments
- @fastify/http-proxy
- Path traversal
- CVSS 7.5 High
@fastify/http-proxy vulnerable to prefix escape via backslash dot-segments
- @fastify/http-proxy
- Path traversal
- CVSS 10.0 CriticalCritical · CVSS 9+
@fastify/http-proxy vulnerable to prefix escape via URL-encoded characters
- @fastify/http-proxy
- CWE-20
- CVSS 8.7 High
@fastify/http-proxy vulnerable to prefix escape via WebSocket path traversal
- @fastify/http-proxy
- Path traversal