Advisories · Technology
@fastify/reply-from.
Every CVE that names @fastify/reply-from among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.2 High
@fastify/reply-from vulnerable to path traversal via backslash dot-segment prefix escape
- @fastify/reply-from
- Path traversal
- CVSS 7.4 High
@fastify/reply-from vulnerable to improper certificate validation in built-in HTTPS transports
- @fastify/reply-from
- Weak cryptography or TLS
- CVSS 8.7 High
@fastify/reply-from vulnerable to cross-upstream request routing via URL cache key collision
- @fastify/reply-from
- CWE-441