VDB
GHSA-gwhp-pf74-vj37
GHSA-gwhp-pf74-vj37
PUBLISHED
CVSS 8.600000381469727 HIGH
Fastify's connection header abuse enables stripping of proxy-added headers
Risk Scores
CVSS 3.1
8.600000381469727
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| fastify | reply-from | 0, 0, 0 |
| fastify | http-proxy | 0, 0, 0 |
Timeline
- Apr 16, 2026 CVE Published
- Apr 30, 2026 Security Advisory
- Jun 9, 2026 CVE Updated