An open index of dependabot pull requests across open source projects.

fastify

Ecosystem:
npm
Package URL:
pkg:npm/fastify
Total PRs:
3,328 Dependabot PRs
Latest PR:
6 days ago
Unique Repositories:
1,285 repositories
Unique Repos (30 days):
47 repositories
Security Advisories
Denial of Service vulnerability with large JSON payloads in fastify
GHSA-mq6c-fh97-4gwv CVE-2018-3711 HIGH published almost 8 years ago • updated 4 days ago
Affected versions of `fastify` are vulnerable to a denial of service when processing a request with `Content-Type` set to `application/json` and a ...
Fastify vulnerable to invalid content-type parsing, which could lead to validation bypass
GHSA-mg2h-6x62-wpwc CVE-2025-32442 HIGH published about 1 year ago • updated 4 days ago
### Impact In applications that specify different validation strategies for different content types, it's possible to bypass the validation by pro...
Fastify's Content-Type header tab character allows body validation bypass
GHSA-jx2c-rxcm-jvmq CVE-2026-25223 HIGH published 4 months ago • updated 16 days ago
### Impact A validation bypass vulnerability exists in Fastify where request body validation schemas specified by Content-Type can be completely c...
fastify vulnerable to denial of service via malicious Content-Type
GHSA-455w-c45v-86rg CVE-2022-39288 HIGH published over 3 years ago • updated 4 days ago
### Impact An attacker can send an invalid `Content-Type` header that can cause the application to crash, leading to a possible Denial of Service a...
Fastify: Incorrect Content-Type parsing can lead to CSRF attack
GHSA-3fjj-p79j-c9hh CVE-2022-41919 MODERATE published over 3 years ago • updated 4 days ago
### Impact The attacker can use the incorrect `Content-Type` to bypass the `Pre-Flight` checking of `fetch`. `fetch()` requests with Content-Type’...
Recent PRs
Package Details
Name: fastify
Ecosystem: npm
PURL Type: npm
Package URL: pkg:npm/fastify
JSON API: View JSON
Security Advisories

10

Active advisories
HIGH 5
MODERATE 4
LOW 1
View All npm Advisories
Package Information
Description:

Fast and low overhead web framework, for Node.js

Repository: https://github.com/fastify/fastify
Homepage: https://fastify.dev/
Latest Release: 5.3.3
about 1 year ago
Dependent Repos: 16,712
Dependent Packages: 3,270
Downloads: 10,856,076
Ranking: Top 0.206% by dependent repos Top 0.1136% by downloads Top 0.0251% by dependent pkgs
PR Status
Open 1,549 (46.5%)
Merged 308 (9.3%)
Closed 1,263 (38.0%)
PR Types
Major 649 (19.5%)
Minor 1,681 (50.5%)
Patch 748 (22.5%)
Removal 36 (1.1%)