{"action":"Upgrade @fastify/reply-from to 12.5.0 or later.","affected":[{"fixed":"12.5.0","introduced":"0"}],"component":"@fastify/reply-from","cve_ids":["CVE-2025-66415"],"ecosystem":"npm","epss":0.00179,"exploited":false,"fixed_versions":["12.5.0"],"ghsa_id":"GHSA-2q7r-29rg-6m5h","id":"tcs_01M5KETVRJ0QR81GA9W4DNETB0","modified_at":"2025-12-02T01:30:13.011305Z","published_at":"2025-12-02T00:38:57Z","references":["https://osv.dev/vulnerability/GHSA-2q7r-29rg-6m5h","https://github.com/fastify/fastify-reply-from/security/advisories/GHSA-2q7r-29rg-6m5h","https://nvd.nist.gov/vuln/detail/CVE-2025-66415","https://github.com/fastify/fastify-reply-from/commit/4d9795cd5b57a36756d37b7f036eae369f69fa66","https://github.com/fastify/fastify-reply-from"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-2q7r-29rg-6m5h","url":"https://osv.dev/vulnerability/GHSA-2q7r-29rg-6m5h"}],"summary":"fastify-reply-from affected by bypass of reply forwarding"}