{"action":"Upgrade fastify to 5.12.6 or later.","affected":[{"fixed":"5.12.6","introduced":"5.12.2"}],"component":"fastify","cve_ids":["CVE-2026-107832"],"ecosystem":"npm","exploited":false,"fixed_versions":["5.12.6"],"ghsa_id":"GHSA-389g-gv7q-r4x8","id":"tcs_01M5JMD7GGNY3QFCJR0Y35MKR4","modified_at":"2026-10-22T16:45:04.287484964Z","published_at":"2026-10-22T16:40:35Z","references":["https://osv.dev/vulnerability/GHSA-389g-gv7q-r4x8","https://github.com/fastify/fastify/security/advisories/GHSA-389g-gv7q-r4x8","https://nvd.nist.gov/vuln/detail/CVE-2026-107832","https://github.com/fastify/fastify/pull/7104","https://github.com/fastify/fastify/commit/3241fbd2f10a8ca1503533726836b53b6e8775a2","https://github.com/fastify/fastify/commit/35c32375731c111439682b2f9e6e0baed2694269","https://cna.openjsf.org/security-advisories.html","https://github.com/fastify/fastify","https://github.com/fastify/fastify/releases/tag/v5.12.6"],"severity":{"label":"low","score":3.7},"sources":[{"source":"osv","source_id":"GHSA-389g-gv7q-r4x8","url":"https://osv.dev/vulnerability/GHSA-389g-gv7q-r4x8"}],"summary":"fastify is vulnerable to header validation bypass via case-sensitive propertyNames"}