Skip to content
Threat Feed
Subscribe

Product

@Fastify/Static

1 brief RSS
high advisory

Fastify/static Vulnerable to Route Guard Bypass via Path Traversal

The @fastify/static package is vulnerable to a route guard bypass via path traversal using non-leading '..' or '%2E%2E' path segments, allowing attackers to circumvent route-based middleware and access protected files that are served by the static plugin.

@fastify/static fastify nodejs web-vulnerability path-traversal webserver
1r 3t 1c