mcollina

undici vulnerable to downstream response splitting via retry interceptor

undici vulnerable to Denial of Service via orphaned RetryHandler response body

fastify vulnerable to request body replacement via an async validation result collision

fastify vulnerable to authentication bypass via malformed URLs reaching encapsulated not-found handlers

fastify vulnerable to header validation bypass via incomplete schema case normalization

fast-uri vulnerable to host confusion via an unclosed bracket in the URI authority

@fastify/http-proxy vulnerable to prefix escape via backslash dot-segments

fast-uri vulnerable to host confusion via skipped IDN canonicalization on scheme-relative references

fast-uri vulnerable to server-side request forgery via repeated hostname percent-decoding

fast-uri vulnerable to server-side request forgery via malformed IPv6 normalization