CVE-2026-15074
1 advisory.
npm/@fastify/static CVE-2026-15074: high 7.5
@fastify/static vulnerable to route guard bypass via path traversal
Action: Upgrade @fastify/static to 10.1.1 or later.
npm i @fastify/static@10.1.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 10.1.1 | - |
Fixed versions
| 10.1.1 |
Sources
- osv: GHSA-83w8-p2f5-377r
- https://github.com/fastify/fastify-static/security/advisories/GHSA-83w8-p2f5-377r
- https://nvd.nist.gov/vuln/detail/CVE-2026-15074
- https://github.com/fastify/fastify-static/commit/db4276f846ba56b21f93768cd6636ee5e2fc58b1
- https://cna.openjsf.org/security-advisories.html
- https://github.com/fastify/fastify-static
- https://github.com/fastify/fastify-static/releases/tag/v10.1.1
CVE-2026-15074 · published · modified · JSON