fastify @fastify/websocket vulnerabilities

Latest fastify @fastify/websocket CVEs

Newest publication first

1. CVE-2022-39386 fastify-websocket vulnerable to uncaught exception via crash on malformed packet

   Published 2022-11-08

   High·CVSS 7.5

   @fastify/websocket provides WebSocket support for Fastify. Any application using @fastify/websocket could crash if a specific, malformed packet is sent. All versions of fastify-websocket are also impacted. That module is deprecated, so it will not be patched. This has been patche...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.