@fastify/static vulnerabilities

Newest CVEs

• CVE-2026-90982

  @fastify/static vulnerable to route guard bypass via path case-folding

  @fastify/static · @fastify/static

  Medium5.3
• CVE-2026-18427

  @fastify/static vulnerable to route guard bypass via non-canonical path segments

  @fastify/static · @fastify/static

  High7.5
• CVE-2026-15074

  @fastify/static vulnerable to route guard bypass via path traversal

  @fastify/static · @fastify/static

  High7.5
• CVE-2026-7120

  @fastify/static vulnerable to Authorization Bypass via Non-Canonical URL Paths

  @fastify/static · @fastify/static

  Medium5.3
• CVE-2026-6410

  @fastify/static vulnerable to path traversal in directory listing

  @fastify/static · @fastify/static

  Medium5.3
• CVE-2026-6414

  @fastify/static vulnerable to route guard bypass via encoded path separators

  @fastify/static · @fastify/static

  Medium5.9