mcollina

fast-uri vulnerable to inconsistent host case normalization via percent-encoded octets

fastify vulnerable to authentication bypass via malformed URLs reaching encapsulated not-found handlers

fastify vulnerable to request validation bypass via skipped boolean false schemas

fastify vulnerable to request body replacement via an async validation result collision

@fastify/middie vulnerable to path-scoped middleware bypass via absolute-form request target

fastify vulnerable to header validation bypass via incomplete schema case normalization

undici vulnerable to cross-user cookie disclosure via Set-Cookie caching in shared caches

undici vulnerable to response truncation via oversized chunked responses in the dump interceptor

undici vulnerable to TLS certificate validation bypass via dropped connect options in BalancedPool

undici vulnerable to caching and replay of unsafe HTTP method responses