UlisesGascon

@fastify/cors vulnerable to Denial of Service on a CORS preflight with the onSend hook

@fastify/secure-session vulnerable to signature verification bypass via cookie signature removal

@fastify/multipart vulnerable to Denial of Service via a malformed upload hanging delayed file consumers

@fastify/reply-from vulnerable to path traversal via backslash dot-segment prefix escape

fastify vulnerable to Denial of Service via uncaught exception on handlerTimeout with streaming responses

@fastify/middie vulnerable to path-scoped middleware bypass via scope prefix mismatch

multer vulnerable to Denial of Service via a pending asynchronous fileFilter after request teardown

body-parser vulnerable to Denial of Service via trailing bytes after a compressed request body

webpack-dev-server vulnerable to cross-origin WebSocket access via proxied upgrades

webpack-dev-server vulnerable to information disclosure via Host validation bypass in the open-editor endpoint