Skip to content

CVE record · 1 source

CVE-2026-117518

CVSS 8.2

@fastify/reply-from is a Fastify plugin that forwards requests to an upstream HTTP server.

Vendor: @Fastify/Reply-From
Product: @fastify/reply-from
CVSS v3.1: 8.2 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N
Weakness: CWE-22
Exposure class: Developer platform

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

35

CVE NVD 1h ago

@fastify/reply-from is a Fastify plugin that forwards requests to an upstream HTTP server.

@fastify/reply-from is a Fastify plugin that forwards requests to an upstream HTTP server. In versions up to and including 12.8.0, the plugin validated proxy paths against forward-slash dot-segments only and then built the target…

CVSS 8.2 Fix available CVE-2026-117518 @Fastify/Reply-From