UlisesGascon

undici vulnerable to Denial of Service via unbounded decompression of compressed responses

fast-uri vulnerable to host confusion via failed IDN canonicalization

undici WebSocket client vulnerable to denial of service via fragment count bypass

cookies vulnerable to Set-Cookie attribute injection via unvalidated domain and path options

undici vulnerable to TLS certificate validation bypass via dropped requestTls in SOCKS5 ProxyAgent

undici vulnerable to cross-origin request routing via SOCKS5 proxy pool reuse

@fastify/http-proxy vulnerable to prefix escape via backslash dot-segments

fastify-cli vulnerable to remote code execution via ignored explicit Inspector bind address

@fastify/busboy vulnerable to CRLF injection via multipart Content-Disposition filename and name

@fastify/static vulnerable to route guard bypass via non-canonical path segments