Product by HackerOne
Fastify-reply-from
4 known vulnerabilities in Fastify-reply-from (HackerOne), 0 of them actively exploited (CISA KEV).
Key figures
4
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
2
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2021-21321 | Prefix escape | 10.0 | |
| Critical | CVE-2026-16158 | @fastify/reply-from vulnerable to cross-upstream request routing via URL cache key collision | 8.7 | |
| Medium | CVE-2025-66415 | fastify-reply-from bypass of reply forwarding | 5.4 | |
| High | CVE-2023-51701 | @fastify-reply-from JSON Content-Type parsing confusion | 5.3 |