Known vulnerabilities in Fastify-http-proxy 11.4.4
Vendor:
fastify.io
Software:
Fastify-http-proxy
Version:
11.4.4
Software CPE:
cpe:2.3::fastify.io:fastify-http-proxy:*:*:*:*:*:*:*:*
Website:
https://www.fastify.io/
Total vulnerabilities:
2
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
9.3
Vulnerabilities by Severity
Vulnerabilities (2)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU138402 - Improper input validation CVE-2026-16117 |
CWE-20 | High | 11.6.0 | 20.07.2026 |
SB2026072012 |
||
| #VU138401 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2026-15631 |
CWE-22 | High | 11.6.0 | 20.07.2026 |
SB2026072012 |