Known vulnerabilities in Fastify-http-proxy 11.0.1

Vendor: fastify.io
Software: Fastify-http-proxy
Version: 11.0.1
Software CPE: cpe:2.3::fastify.io:fastify-http-proxy:*:*:*:*:*:*:*:*
Website: https://www.fastify.io/
Total vulnerabilities: 3
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Fastify-http-proxy version 11.0.1 Fastify-http-proxy 11.0.1 is affected by 3 vulnerabilities: 2 high, 1 medium Critical High Medium Low

Vulnerabilities (3)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU138403 - Improper input validation
CVE-2026-33805		 CWE-20 Medium
No
No
 11.4.4 20.07.2026 SB2026072013
#VU138402 - Improper input validation
CVE-2026-16117		 CWE-20 High
No
No
 11.6.0 20.07.2026 SB2026072012
#VU138401 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-15631		 CWE-22 High
No
No
 11.6.0 20.07.2026 SB2026072012