What’s Vulnerable › Products
Fastify/Oauth2 vulnerabilities
1 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.
Check whether your Fastify/Oauth2 version is affected
Latest Fastify/Oauth2 vulnerabilities
- CVE-2026-18165 — @fastify/oauth2 vulnerable to Login CSRF via plantable OAuth state cookies (CVSS 5.4)