fastify fastify/reply-from Schwachstellen (CVE)

Für fastify fastify/reply-from veröffentlichte CVE-Einträge, neueste zuerst. Folgen Sie, um bei neuen Einträgen eine E-Mail zu erhalten.

2 Ergebnisse

8.7Hoch

CVE-2026-16158 vor 4 Monaten

@fastify/reply-from vulnerable to cross-upstream request routing via URL cache key collision

@fastify/reply-from @fastify/reply-from

Impact: @fastify/reply-from versions from 8.3.1 up to but not including 12.6.4 build the internal URL cache key by concatenating the destination and source path without a delimiter. Different destination and source pairs can therefore produce the same key whi…

6.9Mittel

CVE-2025-66415 vor 11 Monaten

fastify-reply-from bypass of reply forwarding

fastify fastify-reply-from

fastify-reply-from is a Fastify plugin to forward the current HTTP request to another server. Prior to 12.5.0, by crafting a malicious URL, an attacker could access routes that are not allowed, even though the reply.from is defined for specific routes in @fas…