{"api_version":"v1","generated_at":"2026-10-08T03:30:00+00:00","product":{"cve_count":1,"evidence_gap_note":"Official registry publication history is linked, but a publisher support or retirement boundary has not been established.","id":"security:cve-fastify-csrf-protection-62c40caf45f7","lifecycle_state":"evidence_gap","linked_lifecycle_url":"https://lifecycle.blacktree.nl/libraries/npm/csrf-protection","name":"csrf-protection","next_cursor":null,"observations":[{"affected":"< 4.1.0; >= 5.0.0, < 6.3.0","affected_versions_present":true,"cve_id":"CVE-2023-27495","cve_url":"https://cve.blacktree.nl/cve/CVE-2023-27495","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-02-05T16:07:38.884Z","patch_url":"https://github.com/fastify/csrf-protection/commit/be3e5761f37aa05c7c1ac8ed44499c51ecec8058","primary_source":"","published":"2023-04-20T17:05:21.515Z"}],"source_generated_at":"2026-10-07T06:21:30.017Z","vendor":"fastify"}}