Product by HackerOne
Fastify\/http-proxy
5 known vulnerabilities in Fastify\/http-proxy (HackerOne), 0 of them actively exploited (CISA KEV).
Key figures
5
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
4
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2021-21322 | Prefix escape | 10.0 | |
| High | CVE-2026-85124 | @fastify/http-proxy vulnerable to prefix escape via backslash dot-segments | 7.5 | |
| Critical | CVE-2026-16117 | @fastify/http-proxy vulnerable to prefix escape via URL-encoded characters | 10.0 | |
| Critical | CVE-2026-15631 | @fastify/http-proxy vulnerable to prefix escape via WebSocket path traversal | 8.7 | |
| Critical | CVE-2026-33805 | @fastify/reply-from vulnerable to connection header abuse enabling stripping of proxy-added headers | 8.6 |
News
- @RISK®: The Consensus Security Vulnerability Alert: Vol. 26, Num. 28sans-atrisk-mail,