CVE-2022-41919
1 advisory.
npm/fastify CVE-2022-41919: medium 4.2, EPSS 0.40%
Fastify: Incorrect Content-Type parsing can lead to CSRF attack
Action: Upgrade fastify to 3.29.4 or later.
npm i fastify@4.10.2npm i fastify@3.29.4Affected
| introduced | fixed | last affected |
|---|---|---|
| 4.0.0 | 4.10.2 | - |
| 3.0.0 | 3.29.4 | - |
Fixed versions
| 4.10.2 | 3.29.4 |
Sources
- osv: GHSA-3fjj-p79j-c9hh
- https://github.com/fastify/fastify/security/advisories/GHSA-3fjj-p79j-c9hh
- https://nvd.nist.gov/vuln/detail/CVE-2022-41919
- https://github.com/fastify/fastify/commit/62dde76f1f7aca76e38625fe8d983761f26e6fc9
- https://github.com/fastify/fastify
- https://www.npmjs.com/package/@fastify/csrf
CVE-2022-41919 · published · modified · JSON