Known vulnerabilities in Fastify-http-proxy

Vendor: fastify.io
Software: Fastify-http-proxy
Software CPE: cpe:2.3::fastify.io:fastify-http-proxy:*:*:*:*:*:*:*:*
Website: https://www.fastify.io/
Total vulnerabilities: 4
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Fastify-http-proxy Fastify-http-proxy is affected by 4 known vulnerabilities: 3 high, 1 medium Critical High Medium Low

Vulnerabilities (4)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU138403 - Improper input validation
CVE-2026-33805		 CWE-20 Medium
No
No
 11.4.4 20.07.2026 SB2026072013
#VU138402 - Improper input validation
CVE-2026-16117		 CWE-20 High
No
No
 11.6.0 20.07.2026 SB2026072012
#VU138401 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-15631		 CWE-22 High
No
No
 11.6.0 20.07.2026 SB2026072012
#VU138400 - Improper Access Control
CVE-2021-21322		 CWE-284 High
No
No
 4.3.1, 7.2.0 23.02.2021 SB2021022330
SB2021041399