Alta
CVE-2026-42349
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 74
Restablecer filtros
Media
CVE-2026-6410
@fastify/static vulnerable to path traversal in directory listing
Media
CVE-2026-6414
@fastify/static vulnerable to route guard bypass via encoded path separators
Crítica
CVE-2026-6270
@fastify/middie vulnerable to middleware authentication bypass in child plugin scopes
Alta
CVE-2026-33804
@fastify/middie vulnerable to middleware bypass via deprecated ignoreDuplicateSlashes option
Crítica
CVE-2026-33808
@fastify/express has a middleware authentication bypass via URL normalization gaps (duplicate slashes and semicolons)
Crítica
CVE-2026-33807
@fastify/express's middleware path doubling causes authentication bypass in child plugin scopes
Crítica
CVE-2026-33805
Fastify's connection header abuse enables stripping of proxy-added headers
Alta
CVE-2026-34076
Clerk: SSRF in the opt-in clerkFrontendApiProxy feature may leak secret keys to unintended host
Media
CVE-2026-3635
fastify: request.protocol and request.host Spoofable via X-Forwarded-Proto/Host from Untrusted Connections
Alta
CVE-2026-33011
Nest Fastify HEAD Request Middleware Bypass
Media
CVE-2026-3419
Fastify's Missing End Anchor in "subtypeNameReg" Allows Malformed Content-Types to Pass Validation
Media
CVE-2025-64166
Mercurius: Incorrect Content-Type parsing can lead to CSRF attack
Alta
CVE-2026-2293
Nest has a Fastify URL Encoding Middleware Bypass
Alta
CVE-2026-2880
@fastify/middie has Improper Path Normalization when Using Path-Scoped Middleware
Baja
CVE-2026-25224
Fastify Vulnerable to DoS via Unbounded Memory Allocation in sendWebStream
Alta
CVE-2026-25223
Fastify's Content-Type header tab character allows body validation bypass
Alta
CVE-2026-22037
@fastify/express vulnerable to Improper Handling of URL Encoding (Hex Encoding)
Alta
CVE-2026-22031
Fastify Middie Middleware Path Bypass
Media
CVE-2025-69211
Nest has a Fastify URL Encoding Middleware Bypass (TOCTOU)
Media
CVE-2025-66482
Misskey has a login rate limit bypass via spoofed X-Forwarded-For header
Media
CVE-2025-66415
fastify-reply-from affected by bypass of reply forwarding
Alta
CVE-2025-53548
@clerk/backend Performs Insufficient Verification of Data Authenticity
Alta
CVE-2025-32442
Fastify vulnerable to invalid content-type parsing, which could lead to validation bypass
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.