@fastify/oauth2 vulnerabilities
2 published CVEs name @fastify/oauth2 among the affected products.
- 2Published CVEs2 of them scored
- 2Last 12 monthspublished in the last year
- 0Critical0 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-110008
@fastify/oauth2 vulnerable to Login CSRF via OAuth state cookie not cleared after callback
@fastify/oauth2 · @fastify/oauth2
Medium4.2 - CVE-2026-18165
@fastify/oauth2 vulnerable to Login CSRF via plantable OAuth state cookies
@fastify/oauth2 · @fastify/oauth2
Medium4.2