What’s Vulnerable › Products

@fastify/reply-from vulnerabilities

2 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your @fastify/reply-from version is affected

Latest @fastify/reply-from vulnerabilities

• CVE-2026-107318 — @fastify/reply-from vulnerable to improper certificate validation in built-in HTTPS transports (CVSS 7.4)
• CVE-2026-16158 — @fastify/reply-from vulnerable to cross-upstream request routing via URL cache key collision (CVSS 10.0)