Product by HackerOne
Fastify Fastify-static
7 known vulnerabilities in Fastify Fastify-static (HackerOne), 0 of them actively exploited (CISA KEV).
Key figures
7
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
0
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2026-18427 | @fastify/static vulnerable to route guard bypass via non-canonical path segments | 7.5 | |
| High | CVE-2026-15074 | @fastify/static vulnerable to route guard bypass via path traversal | 7.5 | |
| High | CVE-2021-22964 | Https://github.com/fastify/fastify-static: Uncontrolled Resource Consumption | 8.8 | |
| Medium | CVE-2021-22963 | Https://github.com/fastify/fastify-static: Open Redirect | 6.1 | |
| Medium | CVE-2026-6410 | @fastify/static vulnerable to path traversal in directory listing | 5.3 | |
| Medium | CVE-2026-6414 | @fastify/static vulnerable to route guard bypass via encoded path separators | 5.9 | |
| Medium | CVE-2026-7120 | @fastify/static vulnerable to Authorization Bypass via Non-Canonical URL Paths | 5.3 |