What’s Vulnerable › Products
Fastify/Busyboy vulnerabilities
3 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.
Check whether your Fastify/Busyboy version is affected
Latest Fastify/Busyboy vulnerabilities
- CVE-2026-74866 — @fastify/busboy vulnerable to CRLF injection via multipart Content-Disposition filename and name (CVSS 5.8)
- CVE-2026-19484 — @fastify/busboy vulnerable to Denial of Service via oversized multipart boundary (CVSS 7.5)
- CVE-2026-19481 — @fastify/busboy vulnerable to Denial of Service via prototype-named multipart part header (CVSS 7.5)