An open index of dependabot pull requests across open source projects.

fastify

Ecosystem:
npm
Package URL:
pkg:npm/fastify
Total PRs:
2,642 Dependabot PRs
Latest PR:
about 4 hours ago
Unique Repositories:
969 repositories
Unique Repos (30 days):
158 repositories
Security Advisories
Fastify vulnerable to invalid content-type parsing, which could lead to validation bypass
GHSA-mg2h-6x62-wpwc CVE-2025-32442 HIGH published 11 months ago • updated 1 day ago
### Impact In applications that specify different validation strategies for different content types, it's possible to bypass the validation by pro...
Fastify: Incorrect Content-Type parsing can lead to CSRF attack
GHSA-3fjj-p79j-c9hh CVE-2022-41919 MODERATE published over 3 years ago • updated about 6 hours ago
### Impact The attacker can use the incorrect `Content-Type` to bypass the `Pre-Flight` checking of `fetch`. `fetch()` requests with Content-Type’...
fastify vulnerable to denial of service via malicious Content-Type
GHSA-455w-c45v-86rg CVE-2022-39288 HIGH published over 3 years ago • updated about 6 hours ago
### Impact An attacker can send an invalid `Content-Type` header that can cause the application to crash, leading to a possible Denial of Service a...
Denial of service in fastify
GHSA-xw5p-hw6r-2j98 CVE-2020-8192 MODERATE published over 5 years ago • updated about 6 hours ago
A denial of service vulnerability exists in Fastify v2.14.1 and v3.0.0-rc.4 that allows a malicious user to trigger resource exhaustion (when the a...
Fastify's Content-Type header tab character allows body validation bypass
GHSA-jx2c-rxcm-jvmq CVE-2026-25223 HIGH published about 1 month ago • updated 1 day ago
### Impact A validation bypass vulnerability exists in Fastify where request body validation schemas specified by Content-Type can be completely c...
Recent PRs (filtered by: Patch PRs )
Bump fastify from 5.7.2 to 5.7.3

graphql-hive/gateway #1911

5.7.2 → 5.7.3 Patch PR
Closed about 1 month ago 2 comments
graphql-hive
Package Details
Name: fastify
Ecosystem: npm
PURL Type: npm
Package URL: pkg:npm/fastify
JSON API: View JSON
Security Advisories

7

Active advisories
HIGH 4
MODERATE 2
LOW 1
View All npm Advisories
Package Information
Description:

Fast and low overhead web framework, for Node.js

Repository: https://github.com/fastify/fastify
Homepage: https://fastify.dev/
Latest Release: 5.3.3
10 months ago
Dependent Repos: 16,712
Dependent Packages: 3,270
Downloads: 10,856,076
Ranking: Top 0.206% by dependent repos Top 0.1136% by downloads Top 0.0251% by dependent pkgs
PR Status
Open 1,281 (48.5%)
Merged 308 (11.7%)
Closed 845 (32.0%)
PR Types
Removal 32 (1.2%)
Minor 1,319 (49.9%)
Major 513 (19.4%)
Patch 566 (21.4%)