F
Vendor security profile
fastify
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs31
Critical7
CISA KEV0
Public exploit1
Patch rate%3
Avg. CVSS7.5
12-month vulnerability rate
0
0
0
1
0
2
0
1
9
11
7
0
CVE KEV
CVE severity distribution
31toplam CVE
Critical7 (23%)
High16 (52%)
Medium8 (26%)
Patch and exploitation view
%3
Verified patch
%0
CISA KEV
%3
Public exploit
1Patch available
0Partial
0Workaround
0Vendor: no patch
30Unknown
Latest vulnerabilities
7.4
CVE-2026-107318
@fastify/reply-from vulnerable to improper certificate validation in built-in HTTPS transports
@
Patch status unknownEPSS %0
6.8
CVE-2026-107275
@fastify/jwt vulnerable to missing token expiration when temporal options cannot be parsed
@
Patch status unknownEPSS %0
5.3
CVE-2026-90982
@fastify/static vulnerable to route guard bypass via path case-folding
@
Patch status unknownEPSS %1
9.1
CVE-2026-92395
@fastify/proxy-addr vulnerable to IP spoofing via IPv4-mapped IPv6 trust subnet
@
Patch status unknownEPSS %0
8.1
CVE-2026-92087
@fastify/auth vulnerable to Authorization Bypass via order-dependent evaluation of composed auth
@
Patch status unknownEPSS %0
5.9
CVE-2026-92081
fastify vulnerable to Denial of Service via unhandled exception on HTTP/2 trailer responses
F
Patch status unknownEPSS %0
7.5
CVE-2026-84428
Vulnerability in Fastify
F
Patch status unknownEPSS %1
9.1
CVE-2026-85184
Vulnerability in Fastify/middie
F
Patch status unknownEPSS %1
8.1
CVE-2026-84504
Improper input validation in Fastify
F
Patch status unknownEPSS %0
7.5
CVE-2026-84469
Improper input validation in Fastify
F
Patch status unknownEPSS %0