Product by HackerOne

    Fastify\/express

    4 known vulnerabilities in Fastify\/express (HackerOne), 0 of them actively exploited (CISA KEV).

    Key figures

    4

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    3

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Fastify\/express (HackerOne)
    CriticalCVE-2026-6556

    @fastify/express vulnerable to middleware bypass via non-string mount paths in prefixed plugins

    		9.1
    CriticalCVE-2026-33808

    fastify fastify/express: Interpretation Conflict

    		9.1
    CriticalCVE-2026-33807

    fastify fastify/express: Interpretation Conflict

    		9.1
    HighCVE-2026-22037

    @fastify/express vulnerable to Improper Handling of URL Encoding (Hex Encoding)

    		8.4

    News

    All products by HackerOne