Homepage
About Snyk

fastify-reply-from@3.5.0 vulnerabilities

`fastify-reply-from@6.7.0` has been deprecated. Please use `@fastify/reply-from@7.0.0` instead.

Go back to all versions of this package
Report a new vulnerability Found a mistake?

Direct Vulnerabilities

Known vulnerabilities in the fastify-reply-from package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.
Fix for free
Vulnerability Vulnerable Version
  • H
Improper Input Validation

fastify-reply-from is a forward your HTTP request to another server, for fastify

Affected versions of this package are vulnerable to Improper Input Validation. It is possible to escape the prefix of the proxied backend service by a specially crafted URL. For instance, where the base url of the proxied server is /pub/, a user could gain access to /priv on the target service.

How to fix Improper Input Validation?

Upgrade fastify-reply-from to version 4.0.2 or higher.

<4.0.2
Go back to all versions of this package