VYPR

Fastify\/reply From

by Fastify

CVEs (1)

  • CVE-2026-16158HigJul 18, 2026
    risk 0.57cvss 8.7epss 0.00

    Impact: @fastify/reply-from versions from 8.3.1 up to but not including 12.6.4 build the internal URL cache key by concatenating the destination and source path without a delimiter. Different destination and source pairs can therefore produce the same key while resolving to…