← All reports

The release of security updates for @fastify/http-proxy addresses vulnerabilities that could allow malicious actors to exploit prefix escape mechanisms in web applications.

CybersecuritySoftware DevelopmentNov 2, 2026score 0.172 posts · 0 replies across 1 instances
Two security advisories were released for the @fastify/http-proxy library, addressing critical and medium-severity vulnerabilities related to prefix escape via percent-encoded backslash and decoded route parameters. These updates are important for maintaining the security of applications using this library.

Claims

The release of security updates for @fastify/http-proxy addresses vulnerabilities that could allow malicious actors to exploit prefix escape mechanisms in web applications.
Parent: CybersecurityEntity: Software Security UpdatesImpact: positiveDate: Nov 2, 2026Target: The necessity of applying security updates to mitigate known vulnerabilities

Source posts

@[email protected]
🚨 Medium-severity security fix in @fastify/[email protected] just released! Patches CVE-2026-120214: @fastify/http-proxy vulnerable to prefix escape via percent-encoded backslash dot-segments https://github.com/fastify/fastify-http-proxy/security/advisories/GHSA-hr26-gmr2-pwcv
0 boosts · 0 favs · 0 replies · Nov 2, 2026
@[email protected]
🚨 Critical-severity security fix in @fastify/[email protected] just released! Patches CVE-2026-120213: @fastify/http-proxy vulnerable to prefix escape via decoded route parameters https://github.com/fastify/fastify-http-proxy/security/advisories/GHSA-h3vp-4jfr-v364
0 boosts · 0 favs · 0 replies · Nov 2, 2026