Known vulnerabilities in Fastify
Vendor:
fastify.io
Software:
Fastify
Software CPE:
cpe:2.3:a:fastify.io:fastify:*:*:*:*:*:nodejs:*:*
Website:
https://www.fastify.io/
Total vulnerabilities:
12
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
8.8
Breakdown by Severity Chart
5.12.1
5.12.0
5.11.3
5.11.2
5.11.1
5.11.0
5.10.0
5.9.0
5.8.5
5.8.4
5.8.3
5.8.2
5.8.1
5.8.0
5.7.4
5.7.3
5.7.2
5.7.1
5.7.0
5.6.2
5.6.1
5.6.0
5.5.0
5.4.0
5.3.3
4.29.1
5.3.2
5.3.1
5.3.0
5.2.2
5.2.1
5.2.0
4.29.0
5.1.0
5.0.0
4.28.1
4.28.0
4.27.0
4.26.2
4.26.1
4.26.0
4.25.2
4.25.1
4.25.0
4.24.3
4.24.2
4.24.1
4.24.0
4.23.2
4.23.1
4.23.0
4.22.2
4.22.1
4.22.0
4.21.0
4.20.0
4.19.2
4.19.1
4.19.0
4.18.0
4.17.0
4.16.3
4.16.2
4.16.1
4.16.0
4.15.0
4.14.1
4.14.0
4.13.0
4.12.0
3.29.5
4.11.0
4.10.2
4.10.1
3.29.4
4.10.0
4.9.2
4.9.1
4.9.0
4.8.1
4.8.0
3.29.3
4.7.0
4.6.0
3.29.2
4.5.3
4.5.2
4.5.1
4.5.0
4.4.0
4.3.0
4.2.1
3.29.1
4.2.0
4.1.0
4.0.3
4.0.2
4.0.1
4.0.0
3.29.0
3.28.0
3.27.4
3.27.3
3.27.2
3.27.1
3.27.0
3.26.0
3.25.3
3.25.2
3.25.1
3.25.0
3.24.1
3.24.0
3.23.1
3.23.0
3.22.1
3.22.0
3.21.6
3.21.5
3.21.4
3.21.3
3.21.2
3.21.1
3.21.0
3.20.2
3.20.1
3.20.0
3.19.2
3.19.1
3.19.0
3.18.1
3.18.0
3.17.0
3.16.2
3.16.0
3.16.1
3.15.1
3.15.0
3.14.1
3.14.2
3.14.0
3.13.0
3.12.0
3.11.0
3.10.1
3.10.0
3.9.2
3.9.1
3.9.0
3.8.0
3.7.0
3.6.0
3.5.1
3.5.0
3.4.1
3.4.0
3.3.0
3.2.1
2.15.3
3.2.0
3.0.0-rc.5
3.0.0-rc.4
2.15.2
3.0.3
3.1.0
3.1.1
3.0.2
3.0.1
3.0.0
2.15.1
2.15.0
2.14.1
2.14.0
2.13.1
2.13.0
2.12.1
2.12.0
2.11.0
2.10.0
2.9.0
2.8.0
2.7.1
2.7.0
2.6.0
2.5.0
2.4.1
2.4.0
2.3.0
2.2.0
2.1.0
2.0.1
2.0.0
1.14.6
1.14.5
1.14.4
1.14.3
1.14.2
1.14.1
1.14.0
1.13.4
1.13.3
1.13.2
1.13.1
1.13.0
1.12.1
1.12.0
1.11.2
1.11.1
1.11.0
1.10.0
1.9.0
1.8.0
1.7.0
1.6.0
1.5.0
1.4.0
1.3.1
1.3.0
1.2.1
1.2.0
1.1.1
1.1.0
1.0.0
0.43.0
0.42.0
0.41.0
0.40.0
0.39.1
0.39.0
0.38.0
0.37.0
0.36.0
0.35.7
0.35.6
0.35.5
0.35.4
0.35.3
0.35.2
0.35.1
0.35.0
0.34.0
0.33.0
0.32.0
0.31.0
0.30.3
0.30.2
0.30.1
0.30.0
0.29.2
0.29.1
0.29.0
0.28.2
0.28.1
0.28.0
0.27.0
0.26.2
0.26.1
0.26.0
0.25.3
0.25.2
0.25.1
0.25.0
0.24.0
0.23.0
0.22.0
0.21.0
0.20.1
0.20.0
0.19.1
0.19.0
0.18.0
0.17.0
0.16.0
0.15.3
0.15.2
0.15.1
0.15.0
0.14.1
0.14.0
0.13.1
0.13.0
0.12.0
0.11.1
0.11.0
0.10.0
0.9.0
0.8.0
0.7.1
0.7.0
0.6.0
0.5.0
0.4.0
0.3.0
0.2.0
0.1.0
Vulnerabilities (12)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU144299 - Use of Less Trusted Source CVE-2026-16732 |
CWE-348 | Medium | 5.12.1 | 19.08.2026 |
SB2026081961 |
||
| #VU144298 - Improper input validation CVE-2026-18504 |
CWE-20 | Low | 5.12.1 | 19.08.2026 |
SB2026081961 |
||
| #VU125980 - Improper Validation of Specified Type of Input CVE-2026-33806 |
CWE-1287 | Medium | 5.8.5 | 14.04.2026 |
SB20260414108 |
||
| #VU125979 - Use of Less Trusted Source CVE-2026-3635 |
CWE-348 | Medium | 5.8.3 | 14.04.2026 |
SB20260414105 |
||
| #VU125978 - Incorrect Regular Expression CVE-2026-3419 |
CWE-185 | Medium | 5.8.1 | 14.04.2026 |
SB20260414104 |
||
| #VU122275 - Resource exhaustion CVE-2026-25224 |
CWE-400 | Medium | 5.7.3 | 03.02.2026 |
SB2026020401 |
||
| #VU122274 - Interpretation Conflict CVE-2026-25223 |
CWE-436 | Medium | 5.7.2 | 03.02.2026 |
SB2026020389 |
||
| #VU125977 - Improper Validation of Specified Type of Input CVE-2025-32442 |
CWE-1287 | Medium | 4.29.1, 5.3.2 | 18.04.2025 |
SB20260414103 |
||
| #VU69495 - Cross-Site Request Forgery (CSRF) CVE-2022-41919 |
CWE-352 | Low | 3.29.4, 4.10.2 | 22.11.2022 |
SB2022112227 |
||
| #VU68304 - Improper Check for Unusual or Exceptional Conditions CVE-2022-39288 |
CWE-754 | Medium | 4.8.1 | 13.10.2022 |
SB2022101347 |
||
| #VU33680 - Resource exhaustion CVE-2020-8192 |
CWE-400 | Medium | 2.15.1, 3.0.0 rc5 | 04.08.2020 |
SB2020080407 |
||
| #VU25829 - Resource exhaustion |
CWE-400 | Medium | 1.5.0 | 09.03.2020 |
SB2020030908 |