mcollina

undici vulnerable to Denial of Service via WebSocketStream unclean close

undici vulnerable to Denial of Service via unbounded decompression of compressed responses

undici vulnerable to cross-origin request routing via SOCKS5 proxy pool reuse

@fastify/http-proxy vulnerable to prefix escape via backslash dot-segments

fastify-cli vulnerable to remote code execution via ignored explicit Inspector bind address

@fastify/busboy vulnerable to CRLF injection via multipart Content-Disposition filename and name

@fastify/static vulnerable to route guard bypass via non-canonical path segments

fast-uri vulnerable to authority injection via an unvalidated port in serialize

fast-uri vulnerable to host confusion via an unclosed bracket in the URI authority

@fastify/aws-lambda vulnerable to Lambda event spoofing via client-controlled x-apigateway-event header