Product by HackerOne
Reply-from
3 known vulnerabilities in Reply-from (HackerOne), 0 of them actively exploited (CISA KEV).
Key figures
3
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
1
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2026-33805 | @fastify/reply-from vulnerable to connection header abuse enabling stripping of proxy-added headers | 8.6 | |
| Medium | CVE-2025-66415 | fastify-reply-from bypass of reply forwarding | 5.4 | |
| High | CVE-2023-51701 | @fastify-reply-from JSON Content-Type parsing confusion | 5.3 |