CVE record · 1 source
CVE-2026-110008
CVSS 4.2@fastify/oauth2 is a Fastify wrapper for OAuth2 login flows.
- Vendor
- Node.js
- Product
- Node.js
- CVSS
- 4.2
- Exposure class
- Developer platform
Coverage
1Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
@fastify/oauth2 is a Fastify wrapper for OAuth2 login flows.
@fastify/oauth2 is a Fastify wrapper for OAuth2 login flows. In versions 7.2.0 through 8.3.1, the state and code-verifier cookies are set without a Path attribute at a login route with two or more path segments, while the…