@fastify/static
Ecosystem:
npm
npm
Package URL:
pkg:npm/@fastify/static
Total PRs:
394 Dependabot PRs
394 Dependabot PRs
Latest PR:
8 days ago
8 days ago
Unique Repositories:
178 repositories
178 repositories
Unique Repos (30 days):
8 repositories
8 repositories
Security Advisories
@fastify/static vulnerable to path traversal in directory listing
GHSA-pr96-94w5-mx2h
CVE-2026-6410
MODERATE
published 2 months ago
• updated 8 days ago
### Impact
`@fastify/static` v9.1.0 and earlier serves directory listings outside the configured static root when the `list` option is enabled. A ...
@fastify/static vulnerable to route guard bypass via encoded path separators
GHSA-x428-ghpx-8j92
CVE-2026-6414
MODERATE
published 2 months ago
• updated 2 days ago
### Impact
`@fastify/static` v9.1.0 and earlier decodes percent-encoded path separators (`%2F`) before filesystem resolution, but Fastify's router...
Recent PRs (filtered by: Removal PRs )
chore(deps): bump @fastify/static and @inworld/runtime
inworld-ai/multimodal-companion-node #41
removed
Removal PR
Closed
2 months ago
3 comments
Bump @fastify/static and @inworld/runtime
inworld-ai/zoom-demeanor-evaluator-node #31
removed
Removal PR
Open
2 months ago
3 comments
Package Details
| Name: | @fastify/static |
| Ecosystem: | npm |
| PURL Type: | npm |
| Package URL: | pkg:npm/@fastify/static |
| JSON API: | View JSON |
Security Advisories
Package Information
Description:
Plugin for serving static files as fast as possible.
| Repository: | https://github.com/fastify/fastify-static |
| Homepage: | https://github.com/fastify/fastify-static |
| Latest Release: |
8.2.0
about 1 year ago |
| Dependent Repos: | 2,807 |
| Dependent Packages: | 280 |
| Downloads: | 4,706,292 |
| Ranking: | Top 0.4313% by dependent repos Top 0.2113% by downloads Top 0.234% by dependent pkgs |