Homepage

fastify-reply-from@3.0.0 vulnerabilities

`fastify-reply-from@6.7.0` has been deprecated. Please use `@fastify/reply-from@7.0.0` instead.

  • latest version

    6.7.0

  • latest non vulnerable version

    6.7.0

  • first published

    6 years ago

  • latest version published

    2 years ago

  • deprecated

    Package is deprecated

  • licenses detected

  • View fastify-reply-from package health on Snyk Advisor  (opens in a new tab)
    • Go back to all versions of this package
    Report a new vulnerability Found a mistake?

    Direct Vulnerabilities

    Known vulnerabilities in the fastify-reply-from package. This does not include vulnerabilities belonging to this package’s dependencies.

    How to fix?

    Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.

    Fix for free
    VulnerabilityVulnerable Version
    • H
    Improper Input Validation

    fastify-reply-from is a forward your HTTP request to another server, for fastify

    Affected versions of this package are vulnerable to Improper Input Validation. It is possible to escape the prefix of the proxied backend service by a specially crafted URL. For instance, where the base url of the proxied server is /pub/, a user could gain access to /priv on the target service.

    How to fix Improper Input Validation?

    Upgrade fastify-reply-from to version 4.0.2 or higher.

    <4.0.2
    Go back to all versions of this package