Fastifyhttp-proxy - vulnerabilities (CVEs)

3 CVEs in 1 products, 0 in the last 30 days, newest from 2026-09-03.

Products

• Fastifyhttp-proxy - 3 CVEs

Newest CVEs of Fastifyhttp-proxy

• CVE-2026-85124 - CVSS 7.5 (high), 2026-09-03: @fastify/http-proxy versions before 11.6.2 do not validate proxied HTTP request paths for backslash based dot-segments before forwarding them to the…
• CVE-2026-16117 - CVSS 10 (critical), 2026-07-18: Impact: @fastify/http-proxy versions up to and including 11.5.0 fail to rewrite the request prefix when the prefix segment is URL-encoded. Fastify's router…
• CVE-2026-15631 - CVSS 10 (critical), 2026-07-18: Impact: @fastify/http-proxy versions from 9.4.0 up to and including 11.5.0 fail to validate the resolved WebSocket destination path against the configured…