@fastify/static vulnerabilities
6 published CVEs name @fastify/static among the affected products.
- 6Published CVEs6 of them scored
- 6Last 12 monthspublished in the last year
- 0Critical2 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-90982
@fastify/static vulnerable to route guard bypass via path case-folding
@fastify/static · @fastify/static
Medium5.3 - CVE-2026-18427
@fastify/static vulnerable to route guard bypass via non-canonical path segments
@fastify/static · @fastify/static
High7.5 - CVE-2026-15074
@fastify/static vulnerable to route guard bypass via path traversal
@fastify/static · @fastify/static
High7.5 - CVE-2026-7120
@fastify/static vulnerable to Authorization Bypass via Non-Canonical URL Paths
@fastify/static · @fastify/static
Medium5.3 - CVE-2026-6410
@fastify/static vulnerable to path traversal in directory listing
@fastify/static · @fastify/static
Medium5.3 - CVE-2026-6414
@fastify/static vulnerable to route guard bypass via encoded path separators
@fastify/static · @fastify/static
Medium5.9