{"api_version":"v1","generated_at":"2026-10-06T23:00:00+00:00","product":{"cve_count":6,"evidence_gap_note":"Official registry publication history is linked, but a publisher support or retirement boundary has not been established.","id":"security:cve-fastify-static-fastify-static-20dbcc95a849","lifecycle_state":"evidence_gap","linked_lifecycle_url":"https://lifecycle.blacktree.nl/libraries/npm/%40fastify/static","name":"@fastify/static","next_cursor":null,"observations":[{"affected":"@fastify/static: < 10.1.4","affected_versions_present":true,"cve_id":"CVE-2026-90982","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-90982","fixed":"@fastify/static: 10.1.4","last_modified":"2026-09-17T12:33:23.661Z","patch_url":"https://github.com/fastify/fastify-static/security/advisories/GHSA-r799-r9gc-m956","primary_source":"","published":"2026-09-17T06:55:42.300Z"},{"affected":"< 10.1.3","affected_versions_present":true,"cve_id":"CVE-2026-18427","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-18427","fixed":"10.1.3","last_modified":"2026-08-06T15:44:54.638Z","patch_url":"https://github.com/fastify/fastify-static/security/advisories/GHSA-423g-23ch-w7c6","primary_source":"","published":"2026-08-06T14:52:26.958Z"},{"affected":"< 10.1.1","affected_versions_present":true,"cve_id":"CVE-2026-15074","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-15074","fixed":"10.1.1","last_modified":"2026-07-23T14:14:46.933Z","patch_url":"https://github.com/fastify/fastify-static/security/advisories/GHSA-83w8-p2f5-377r","primary_source":"","published":"2026-07-23T03:01:47.887Z"},{"affected":"< 10.1.2","affected_versions_present":true,"cve_id":"CVE-2026-7120","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-7120","fixed":"10.1.2","last_modified":"2026-07-23T14:15:22.625Z","patch_url":"https://github.com/fastify/fastify-static/security/advisories/GHSA-8pvw-jcv7-9cmj","primary_source":"","published":"2026-07-23T02:48:35.120Z"},{"affected":"8.0.0 < 9.1.1","affected_versions_present":true,"cve_id":"CVE-2026-6410","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-6410","fixed":"9.1.1","last_modified":"2026-04-16T14:19:36.780Z","patch_url":"https://github.com/fastify/fastify-static/security/advisories/GHSA-pr96-94w5-mx2h","primary_source":"","published":"2026-04-16T13:29:08.120Z"},{"affected":"8.0.0 < 9.1.1","affected_versions_present":true,"cve_id":"CVE-2026-6414","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-6414","fixed":"9.1.1","last_modified":"2026-04-16T13:48:52.393Z","patch_url":"https://github.com/fastify/middie/security/advisories/GHSA-cxrg-g7r8-w69p","primary_source":"","published":"2026-04-16T13:09:03.526Z"}],"source_generated_at":"2026-10-06T06:22:27.870Z","vendor":"@fastify/static"}}