{"api_version":"v1","generated_at":"2026-10-06T14:35:00+00:00","product":{"cve_count":15,"evidence_gap_note":"This CVE identity is linked to an existing Lifecycle product history.","id":"security:cve-fastify-fastify-2ff3046d6b24","lifecycle_state":"covered","linked_lifecycle_url":"https://lifecycle.blacktree.nl/targets/fastify","name":"fastify","next_cursor":null,"observations":[{"affected":"fastify: < 5.12.5","affected_versions_present":true,"cve_id":"CVE-2026-92081","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-92081","fixed":"fastify: 5.12.5","last_modified":"2026-09-16T14:00:59.305Z","patch_url":"https://github.com/fastify/fastify/security/advisories/GHSA-4mh8-r7rc-xpvc","primary_source":"","published":"2026-09-16T08:52:49.757Z"},{"affected":"fastify: < 5.12.2","affected_versions_present":true,"cve_id":"CVE-2026-84428","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-84428","fixed":"fastify: 5.12.2","last_modified":"2026-09-04T16:06:04.123Z","patch_url":"https://github.com/fastify/fastify/security/advisories/GHSA-9q9j-q6p8-xq58","primary_source":"","published":"2026-09-04T10:24:27.809Z"},{"affected":"fastify: < 5.12.2","affected_versions_present":true,"cve_id":"CVE-2026-84469","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-84469","fixed":"fastify: 5.12.2","last_modified":"2026-09-04T19:34:13.735Z","patch_url":"https://github.com/fastify/fastify/security/advisories/GHSA-hwr6-493r-vm6h","primary_source":"","published":"2026-09-04T09:59:36.406Z"},{"affected":"fastify: 4.0.0 < 5.12.2","affected_versions_present":true,"cve_id":"CVE-2026-76169","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-76169","fixed":"fastify: 5.12.2","last_modified":"2026-09-04T16:20:02.318Z","patch_url":"https://github.com/fastify/fastify/security/advisories/GHSA-p68q-wchp-6fh7","primary_source":"","published":"2026-09-04T09:51:03.556Z"},{"affected":"fastify: < 5.12.2","affected_versions_present":true,"cve_id":"CVE-2026-84504","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-84504","fixed":"fastify: 5.12.2","last_modified":"2026-09-04T16:34:58.664Z","patch_url":"https://github.com/fastify/fastify/security/advisories/GHSA-667r-xxjv-c9mm","primary_source":"","published":"2026-09-04T09:40:18.120Z"},{"affected":"5.8.3 < 5.12.1","affected_versions_present":true,"cve_id":"CVE-2026-16732","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-16732","fixed":"5.12.1","last_modified":"2026-08-19T13:16:06.497Z","patch_url":"https://github.com/fastify/fastify/security/advisories/GHSA-3m5p-2c4r-xxw2","primary_source":"","published":"2026-08-18T20:30:22.592Z"},{"affected":"< 5.12.1","affected_versions_present":true,"cve_id":"CVE-2026-18504","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-18504","fixed":"5.12.1","last_modified":"2026-08-19T13:15:05.131Z","patch_url":"https://github.com/fastify/fastify/security/advisories/GHSA-w2qp-rph6-63g4","primary_source":"","published":"2026-08-18T20:19:12.611Z"},{"affected":"5.3.2 < 5.8.5","affected_versions_present":true,"cve_id":"CVE-2026-33806","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-33806","fixed":"5.8.5","last_modified":"2026-07-15T01:06:02.186Z","patch_url":"https://github.com/fastify/fastify/security/advisories/GHSA-mg2h-6x62-wpwc","primary_source":"","published":"2026-04-15T00:14:02.376Z"},{"affected":"\u2264 5.8.2","affected_versions_present":true,"cve_id":"CVE-2026-3635","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-3635","fixed":"5.8.3","last_modified":"2026-03-23T15:30:10.526Z","patch_url":"https://github.com/fastify/fastify/security/advisories/GHSA-444r-cwp2-x5xf","primary_source":"","published":"2026-03-23T13:53:00.386Z"},{"affected":"5.7.2 < 5.8.1","affected_versions_present":true,"cve_id":"CVE-2026-3419","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-3419","fixed":"5.8.1","last_modified":"2026-03-09T14:55:21.011Z","patch_url":"https://github.com/fastify/fastify/commit/67f6c9b32cb3623d3c9470cc17ed830dd2f083d7","primary_source":"","published":"2026-03-06T17:50:58.714Z"},{"affected":"fastify: < 5.7.2","affected_versions_present":true,"cve_id":"CVE-2026-25223","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-25223","fixed":"RHSA-2026:5807: Red Hat OpenShift AI 2.16","last_modified":"2026-09-16T12:04:20.445Z","patch_url":"https://github.com/fastify/fastify/commit/32d7b6add39ddf082d92579a58bea7018c5ac821","primary_source":"","published":"2026-02-03T21:21:40.268Z"},{"affected":"< 5.7.3","affected_versions_present":true,"cve_id":"CVE-2026-25224","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-25224","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2026-02-04T16:20:32.845Z","patch_url":"https://github.com/fastify/fastify/commit/eb11156396f6a5fedaceed0140aed2b7f026be37","primary_source":"","published":"2026-02-03T21:21:35.437Z"},{"affected":">= 5.0.0, < 5.3.2; = 4.29.0","affected_versions_present":true,"cve_id":"CVE-2025-32442","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-32442","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-08-22T20:50:43.059Z","patch_url":"https://github.com/fastify/fastify/commit/436da4c06dfbbb8c24adee3a64de0c51e4f47418","primary_source":"","published":"2025-04-18T15:59:06.670Z"},{"affected":">= 4.0.0, < 4.10.2; >= 3.0.0, < 3.29.4","affected_versions_present":true,"cve_id":"CVE-2022-41919","cve_url":"https://cve.blacktree.nl/cve/CVE-2022-41919","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-04-23T16:36:24.268Z","patch_url":"https://github.com/fastify/fastify/commit/62dde76f1f7aca76e38625fe8d983761f26e6fc9","primary_source":"","published":"2022-11-22T00:00:00.000Z"},{"affected":">= 4.0.0, < 4.8.1","affected_versions_present":true,"cve_id":"CVE-2022-39288","cve_url":"https://cve.blacktree.nl/cve/CVE-2022-39288","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-04-23T16:51:56.095Z","patch_url":"https://github.com/fastify/fastify/commit/fbb07e8dfad74c69cd4cd2211aedab87194618e3","primary_source":"","published":"2022-10-10T00:00:00.000Z"}],"source_generated_at":"2026-10-06T06:22:27.870Z","vendor":"fastify"}}