@fastify/http-proxy vulnerabilities
5 published CVEs name @fastify/http-proxy among the affected products.
- 5Published CVEs5 of them scored
- 5Last 12 monthspublished in the last year
- 2Critical2 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-120213
@fastify/http-proxy vulnerable to prefix escape via decoded route parameters
@fastify/http-proxy · @fastify/http-proxy
Critical9.1 - CVE-2026-120214
@fastify/http-proxy vulnerable to prefix escape via percent-encoded backslash dot-segments
@fastify/http-proxy · @fastify/http-proxy
Medium5.9 - CVE-2026-85124
@fastify/http-proxy vulnerable to prefix escape via backslash dot-segments
@fastify/http-proxy · @fastify/http-proxy
High7.5 - CVE-2026-16117
@fastify/http-proxy vulnerable to prefix escape via URL-encoded characters
@fastify/http-proxy · @fastify/http-proxy
Critical10.0 - CVE-2026-15631
@fastify/http-proxy vulnerable to prefix escape via WebSocket path traversal
@fastify/http-proxy · @fastify/http-proxy
High8.7