VYPR

Fastify\/forwarded

by Fastify

CVEs (1)

  • CVE-2026-18174MedJul 29, 2026
    risk 0.34cvss 5.3epss 0.00

    @fastify/forwarded resolves client addresses from the X-Forwarded-For header. In versions before 3.0.2, when the header contains two or more comma separated entries, the parser trims only space characters and does not strip horizontal tabs, even though RFC 7230 defines optional…