What’s Vulnerable › Products
https://github.com/fastify/fastify-static vulnerabilities
7 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 5 published in the last 12 months.
Check whether your https://github.com/fastify/fastify-static version is affected
Latest https://github.com/fastify/fastify-static vulnerabilities
- CVE-2026-18427 — @fastify/static vulnerable to route guard bypass via non-canonical path segments (CVSS 7.5)
- CVE-2026-7120 — @fastify/static vulnerable to Authorization Bypass via Non-Canonical URL Paths (CVSS 5.3)
- CVE-2026-15074 — @fastify/static vulnerable to route guard bypass via path traversal (CVSS 7.5)
- CVE-2026-6410 — @fastify/static vulnerable to path traversal in directory listing (CVSS 5.3)
- CVE-2026-6414 — @fastify/static vulnerable to route guard bypass via encoded path separators (CVSS 5.9)
- CVE-2021-22964 — (CVSS 8.8)
- CVE-2021-22963 — (CVSS 6.1)