An open index of dependabot pull requests across open source projects.

fastify

Ecosystem:
npm
Package URL:
pkg:npm/fastify
Total PRs:
3,328 Dependabot PRs
Latest PR:
6 days ago
Unique Repositories:
1,285 repositories
Unique Repos (30 days):
47 repositories
Security Advisories
Denial of Service vulnerability with large JSON payloads in fastify
GHSA-mq6c-fh97-4gwv CVE-2018-3711 HIGH published almost 8 years ago • updated 4 days ago
Affected versions of `fastify` are vulnerable to a denial of service when processing a request with `Content-Type` set to `application/json` and a ...
Fastify Vulnerable to DoS via Unbounded Memory Allocation in sendWebStream
GHSA-mrq3-vjjr-p77c CVE-2026-25224 LOW published 4 months ago • updated about 4 hours ago
### Impact A Denial of Service vulnerability in Fastify’s Web Streams response handling can allow a remote client to exhaust server memory. Applica...
Fastify's Content-Type header tab character allows body validation bypass
GHSA-jx2c-rxcm-jvmq CVE-2026-25223 HIGH published 4 months ago • updated about 4 hours ago
### Impact A validation bypass vulnerability exists in Fastify where request body validation schemas specified by Content-Type can be completely c...
Fastify vulnerable to invalid content-type parsing, which could lead to validation bypass
GHSA-mg2h-6x62-wpwc CVE-2025-32442 HIGH published about 1 year ago • updated 4 days ago
### Impact In applications that specify different validation strategies for different content types, it's possible to bypass the validation by pro...
fastify vulnerable to denial of service via malicious Content-Type
GHSA-455w-c45v-86rg CVE-2022-39288 HIGH published over 3 years ago • updated 4 days ago
### Impact An attacker can send an invalid `Content-Type` header that can cause the application to crash, leading to a possible Denial of Service a...
Recent PRs (filtered by: Patch PRs )
Package Details
Name: fastify
Ecosystem: npm
PURL Type: npm
Package URL: pkg:npm/fastify
JSON API: View JSON
Security Advisories

10

Active advisories
HIGH 5
MODERATE 4
LOW 1
View All npm Advisories
Package Information
Description:

Fast and low overhead web framework, for Node.js

Repository: https://github.com/fastify/fastify
Homepage: https://fastify.dev/
Latest Release: 5.3.3
about 1 year ago
Dependent Repos: 16,712
Dependent Packages: 3,270
Downloads: 10,856,076
Ranking: Top 0.206% by dependent repos Top 0.1136% by downloads Top 0.0251% by dependent pkgs
PR Status
Open 1,549 (46.5%)
Merged 308 (9.3%)
Closed 1,263 (38.0%)
PR Types
Major 649 (19.5%)
Minor 1,681 (50.5%)
Patch 748 (22.5%)
Removal 36 (1.1%)