Browse / Fastify

Fastify

See its reports on the map

What gets reported to Fastify

• Denial of Service3
• Code Execution1
• Open Redirect1

Most upvoted reports

AllValidInformativeN/ADuplicate

1. Remote Code Execution via unsafe usage of `reply.view({ raw })` in @fastify/view (EJS template engine)Code Injection
   66 votes
2. DoS via Unbounded Memory Allocation in sendWebStream on Fastify v5.7.0+ leads to OOM crash when backpressure is ignoredUncontrolled Resource Consumption
   35 votes
3. Deny of service via malicious Content-TypeUncontrolled Resource Consumption · high
   17 votes
4. 1-click DOS in fastify-static via directly passing user's input to new URL() of NodeJS without try/catchUncontrolled Resource Consumption · medium
   4 votes
5. Open redirect in fastify-static via mishandled user's input when attempt to redirectOpen Redirect · low
   3 votes