High
CVE-2025-24033
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 74
Reset filters
High
CVE-2024-35220
@fastify/session reuses destroyed session cookie
High
CVE-2024-31999
@fastify/secure-session: Reuse of destroyed secure session cookie
Medium
CVE-2024-22207
Default swagger-ui configuration exposes all files in the module
Medium
CVE-2023-51701
@fastify/reply-from JSON Content-Type parsing confusion
High
CVE-2023-31999
@fastify/oauth2 vulnerable to Cross Site Request Forgery due to reused Oauth2 state
High
CVE-2023-29019
Session fixation in fastify-passport
Medium
CVE-2023-29020
CSRF token fixation in fastify-passport
Medium
CVE-2023-27495
Bypass of CSRF protection in the presence of predictable userInfo
High
CVE-2023-25576
Denial of service due to unlimited number of parts
Medium
CVE-2023-22477
mercurius has Uncaught Exception when using subscriptions
Medium
CVE-2022-41919
Fastify: Incorrect Content-Type parsing can lead to CSRF attack
High
CVE-2022-39386
fastify/websocket vulnerable to uncaught exception via crash on malformed packet
High
CVE-2022-39288
fastify vulnerable to denial of service via malicious Content-Type
High
CVE-2022-31142
fastify-bearer-auth vulnerable to Timing Attack Vector
High
CVE-2021-23597
Uncaught Exception in fastify-multipart
High
CVE-2021-22964
DOS and Open Redirect with user input
Medium
CVE-2021-22963
URL Redirection to Untrusted Site ('Open Redirect') in fastify-static
Medium
CVE-2021-29624
Lack of protection against cookie tossing attacks in fastify-csrf
Medium
CVE-2020-8136
Uncontrolled Resource Consumption in fastify-multipart
Low
CVE-2021-21322
Prefix escape
Critical
CVE-2021-21321
Prefix escape
High
CVE-2020-28482
Cross-site Request Forgery in fastify-csrf
Medium
CVE-2020-8192
Denial of service in fastify
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.