UlisesGascon

@fastify/multipart vulnerable to Denial of Service via a malformed upload hanging delayed file consumers

@fastify/reply-from vulnerable to path traversal via backslash dot-segment prefix escape

fastify vulnerable to Denial of Service via uncaught exception on handlerTimeout with streaming responses

@fastify/middie vulnerable to path-scoped middleware bypass via scope prefix mismatch

multer vulnerable to Denial of Service via a pending asynchronous fileFilter after request teardown

body-parser vulnerable to Denial of Service via trailing bytes after a compressed request body

webpack-dev-server vulnerable to cross-origin WebSocket access via proxied upgrades

webpack-dev-server vulnerable to information disclosure via Host validation bypass in the open-editor endpoint

fast-uri vulnerable to scheme injection via an unescaped first-segment colon in suffix references

fast-uri vulnerable to URI scheme spoofing via percent-encoded scheme decoding