`fastify`

Ecosystem:
npm

Package URL:
pkg:npm/fastify

Total PRs:
1,384 Dependabot PRs

Latest PR:
about 2 hours ago

Unique Repositories:
533 repositories

Unique Repos (30 days):
230 repositories

Security Advisories

Denial of service in fastify

GHSA-xw5p-hw6r-2j98 CVE-2020-8192 MODERATE published about 5 years ago • updated 30 days ago

A denial of service vulnerability exists in Fastify v2.14.1 and v3.0.0-rc.4 that allows a malicious user to trigger resource exhaustion (when the a...

Denial of Service vulnerability with large JSON payloads in fastify

GHSA-mq6c-fh97-4gwv CVE-2018-3711 HIGH published about 7 years ago • updated about 1 month ago

Affected versions of `fastify` are vulnerable to a denial of service when processing a request with `Content-Type` set to `application/json` and a ...

Fastify vulnerable to invalid content-type parsing, which could lead to validation bypass

GHSA-mg2h-6x62-wpwc CVE-2025-32442 HIGH published 5 months ago • updated 19 days ago

### Impact In applications that specify different validation strategies for different content types, it's possible to bypass the validation by pro...

4.29.0 → 4.29.1 Patch PR

Open 1 day ago

Bump the npm_and_yarn group with 6 updates

djmurphy32/peter-smith #379

4.29.0 → 4.29.1 Patch PR

Open 7 days ago

Bump fastify from 4.29.0 to 4.29.1 in /tutorial/starwars-film-service-ts

bufbuild/knit #63

4.29.0 → 4.29.1 Patch PR

Open 9 days ago

Bump fastify from 4.29.0 to 4.29.1 in /tutorial/starwars-starship-service-ts

bufbuild/knit #62

4.29.0 → 4.29.1 Patch PR

Merged 10 days ago

chore(deps): bump the npm_and_yarn group across 2 directories with 10 updates

thirdweb-dev/engine #912

4.29.0 → 4.29.1 Patch PR

Open 16 days ago 4 comments

chore(deps): bump the npm_and_yarn group across 5 directories with 7 updates

blumond7/FastGPT #3

4.29.0 → 4.29.1 Patch PR

Open about 1 month ago

Bump the npm_and_yarn group across 1 directory with 5 updates

TSGCFO/web-scraper #1

4.29.0 → 4.29.1 Patch PR

Open about 2 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 5 directories with 6 updates

lifeisnphard/FastGPT #2

4.29.0 → 4.29.1 Patch PR

Open about 2 months ago

Bump fastify from 4.29.0 to 4.29.1

emanuel-o-dev/legotech-back #1

4.29.0 → 4.29.1 Patch PR

Merged about 2 months ago

build(deps-dev): bump fastify from 4.29.0 to 4.29.1 in /superset-frontend

PolukovY/superset-5.0.0 #71

4.29.0 → 4.29.1 Patch PR

Open 2 months ago 1 comment

build(deps): bump fastify from 4.29.0 to 4.29.1 in /kms/auth-eth

Dstack-TEE/dstack #234

4.29.0 → 4.29.1 Patch PR

Merged 2 months ago

Bump fastify from 4.29.0 to 4.29.1 in /shopify/product-quiz-public-remix-ssr

gadget-inc/templates #155

4.29.0 → 4.29.1 Patch PR

Open 2 months ago

chore(deps): bump the npm_and_yarn group across 2 directories with 8 updates

thirdweb-dev/engine #901

4.29.0 → 4.29.1 Patch PR

Open 3 months ago

build(deps): bump fastify and @nestjs/platform-fastify

whaagmans/f #6

5.3.0 → 5.3.3 Patch PR

Open 3 months ago

Bump the npm_and_yarn group with 5 updates

mattobee/mocom11ty #88

4.29.0 → 4.29.1 Patch PR

Open 3 months ago 1 comment

Bump fastify from 4.29.0 to 4.29.1

luccasfr/fastify_boilerplate #83

4.29.0 → 4.29.1 Patch PR

Merged 3 months ago

Bump fastify from 4.29.0 to 4.29.1

mjwbenton/mattb.tech-graphql-api #68

4.29.0 → 4.29.1 Patch PR

Merged 3 months ago

Bump the dependencies group across 1 directory with 17 updates

abirajs/novalnet_payment_new #9

5.3.2 → 5.3.3 Patch PR

Open 3 months ago

Bump the npm_and_yarn group across 1 directory with 7 updates

cyborg-ai-git/openai-realtime-console #1

4.29.0 → 4.29.1 Patch PR

Open 3 months ago

Bump the dependencies group in /processor with 16 updates

abirajs/novalnet_payment_new #4

5.3.2 → 5.3.3 Patch PR

Closed 3 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 1 directory with 7 updates

JuiceMitApfelnDrin/CodinCod #194

4.29.0 → 4.29.1 Patch PR

Closed 3 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 2 directories with 7 updates

thirdweb-dev/engine #898

4.29.0 → 4.29.1 Patch PR

Closed 3 months ago 3 comments

Bump the dependencies group across 1 directory with 16 updates

abirajs/custom-template-payment #12

5.3.2 → 5.3.3 Patch PR

Closed 3 months ago 1 comment

Bump the dependencies group across 1 directory with 15 updates

abirajs/custom-template-payment #10

5.3.2 → 5.3.3 Patch PR

Closed 3 months ago 1 comment

Bump the dependencies group across 1 directory with 15 updates

abirajs/novalnet_payment #8

5.3.2 → 5.3.3 Patch PR

Open 3 months ago 2 comments

Bump the dependencies group across 1 directory with 15 updates

abirajs/custom_drop_in #6

5.3.2 → 5.3.3 Patch PR

Open 3 months ago

Bump the dependencies group across 1 directory with 15 updates

abirajs/custom-novalnet-payment #9

5.3.2 → 5.3.3 Patch PR

Closed 3 months ago 2 comments

chore(deps): bump fastify from 4.29.0 to 4.29.1

RiseDefenseSystems/postgres-meta #2

4.29.0 → 4.29.1 Patch PR

Merged 3 months ago

Bump fastify from 4.29.0 to 4.29.1 in the npm_and_yarn group

tekdi/ubi-eligibility-sdk #3

4.29.0 → 4.29.1 Patch PR

Closed 3 months ago 3 comments

Bump the dependencies group across 1 directory with 14 updates

abirajs/novalnet-commercetools-main #7

5.3.2 → 5.3.3 Patch PR

Closed 3 months ago 1 comment

Bump the dependencies group across 1 directory with 14 updates

abirajs/adyen-test #7

5.3.2 → 5.3.3 Patch PR

Closed 3 months ago 1 comment

Bump fastify and homebridge-config-ui-x

kopiro/homebridge-playstation #126

4.29.0 → 4.29.1 Patch PR

Open 3 months ago

build(deps): bump the dependencies group across 1 directory with 46 updates

OneGrep/typescript-sdk #89

5.3.2 → 5.3.3 Patch PR

Closed 3 months ago 2 comments

build(deps): bump the tunnel-server-deps group across 1 directory with 11 updates

livecycle/preevy #573

4.29.0 → 4.29.1 Patch PR

Closed 3 months ago 1 comment

build(deps): bump the root-deps group across 1 directory with 23 updates

livecycle/preevy #572

4.29.0 → 4.29.1 Patch PR

Closed 3 months ago 1 comment

chore(deps): bump fastify from 4.29.0 to 4.29.1

labring/FastGPT #4973

4.29.0 → 4.29.1 Patch PR

Open 3 months ago 1 comment

Bump fastify from 4.29.0 to 4.29.1

ashantyk/vagrant-private-cloud #15

4.29.0 → 4.29.1 Patch PR

Merged 3 months ago

Bump fastify and homebridge-config-ui-x

homebridge-plugins/homebridge-aladdin-connect #66

4.29.0 → 4.29.1 Patch PR

Closed 3 months ago 1 comment

fix(deps): bump fastify from 5.3.1 to 5.3.2 in the npm_and_yarn group

ducktors/arecibo #50

5.3.1 → 5.3.2 Patch PR

Open 3 months ago 4 comments

Bump the dependencies group across 1 directory with 16 updates

abirajs/custom-template-payment #9

5.3.2 → 5.3.3 Patch PR

Closed 3 months ago 1 comment

Bump fastify from 4.29.0 to 4.29.1

nikkorinyuki/makeit #3

4.29.0 → 4.29.1 Patch PR

Open 3 months ago

Bump the dependencies group across 1 directory with 16 updates

abirajs/custom_drop_in #5

5.3.2 → 5.3.3 Patch PR

Open 3 months ago 2 comments

Bump the dependencies group across 1 directory with 16 updates

abirajs/custom-novalnet-payment #7

5.3.2 → 5.3.3 Patch PR

Closed 3 months ago 2 comments

chore(deps): bump the npm_and_yarn group with 3 updates

jabrown93/homebridge-smartrent #84

5.3.0 → 5.3.3 Patch PR

Closed 3 months ago 2 comments

Bump the dependencies group across 1 directory with 17 updates

abirajs/custom-template-payment #8

5.3.2 → 5.3.3 Patch PR

Open 3 months ago 1 comment

Bump the dependencies group across 1 directory with 17 updates

abirajs/custom_drop_in #4

5.3.2 → 5.3.3 Patch PR

Open 3 months ago 2 comments

Bump the dependencies group across 1 directory with 17 updates

abirajs/novalnet_payment #6

5.3.2 → 5.3.3 Patch PR

Closed 3 months ago 2 comments

Bump the dependencies group across 1 directory with 15 updates

abirajs/novalnet-commercetools-main #6

5.3.2 → 5.3.3 Patch PR

Open 3 months ago 1 comment

Bump the dependencies group across 1 directory with 15 updates

abirajs/adyen-test #6

5.3.2 → 5.3.3 Patch PR

Open 3 months ago

Bump the dependencies group across 1 directory with 17 updates

abirajs/custom-novalnet-payment #6

5.3.2 → 5.3.3 Patch PR

Open 3 months ago

Package Details

Name:	`fastify`
Ecosystem:	npm
PURL Type:	npm
Package URL:	`pkg:npm/fastify`
JSON API:	View JSON

Security Advisories

5

Active advisories

HIGH 3

MODERATE 2

View All npm Advisories

Package Information

Description:

Fast and low overhead web framework, for Node.js

Repository:	https://github.com/fastify/fastify
Homepage:	https://fastify.dev/
Latest Release:	`5.3.3` 4 months ago
Dependent Repos:	16,712
Dependent Packages:	3,270
Downloads:	10,856,076
Ranking:	Top 0.206% by dependent repos Top 0.1136% by downloads Top 0.0251% by dependent pkgs

PR Status

Open 628 (45.4%)

Merged 218 (15.8%)

Closed 329 (23.8%)

PR Types

Removal 25 (1.8%)

Minor 641 (46.3%)

Major 233 (16.8%)

Patch 275 (19.9%)

fastify

Security Advisories

Denial of service in fastify

Denial of Service vulnerability with large JSON payloads in fastify

Fastify vulnerable to invalid content-type parsing, which could lead to validation bypass

Fastify: Incorrect Content-Type parsing can lead to CSRF attack

fastify vulnerable to denial of service via malicious Content-Type

Recent PRs (filtered by: Patch PRs )

Package Details

Security Advisories

5

Package Information

PR Status

PR Types

`fastify`