Skip to content

CVE record · 1 source

CVE-2026-120214

CVSS 5.9

@fastify/http-proxy is a Fastify plugin that proxies HTTP requests to an upstream server under a configured prefix.

Vendor: @Fastify/Http-Proxy
Product: @fastify/http-proxy
CVSS v3.1: 5.9 AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Weakness: CWE-22
Exposure class: Developer platform

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

28

CVE NVD 2h ago

@fastify/http-proxy is a Fastify plugin that proxies HTTP requests to an upstream server under a configured prefix.

@fastify/http-proxy is a Fastify plugin that proxies HTTP requests to an upstream server under a configured prefix. In versions 11.6.0 through 11.6.2, the destination validation normalizes literal backslashes before it…

CVSS 5.9 Fix available CVE-2026-120214 @Fastify/Http-Proxy