{"action":"Upgrade fastify-http-proxy to 4.3.1 or later.","affected":[{"fixed":"4.3.1","introduced":"0"}],"component":"fastify-http-proxy","cve_ids":["CVE-2021-21322"],"ecosystem":"npm","epss":0.01627,"exploited":false,"fixed_versions":["4.3.1"],"ghsa_id":"GHSA-c4qr-gmr9-v23w","id":"tcs_01M5KFHRTWKR3KGKDY5637T4EJ","modified_at":"2026-07-08T06:28:05.180812220Z","published_at":"2021-03-03T02:18:08Z","references":["https://osv.dev/vulnerability/GHSA-c4qr-gmr9-v23w","https://github.com/fastify/fastify-http-proxy/security/advisories/GHSA-c4qr-gmr9-v23w","https://nvd.nist.gov/vuln/detail/CVE-2021-21322","https://github.com/fastify/fastify-http-proxy/commit/02d9b43c770aa16bc44470edecfaeb7c17985016","https://www.npmjs.com/package/fastify-http-proxy"],"severity":{"label":"critical","score":10},"sources":[{"source":"osv","source_id":"GHSA-c4qr-gmr9-v23w","url":"https://osv.dev/vulnerability/GHSA-c4qr-gmr9-v23w"}],"summary":"Prefix escape"}