UlisesGascon

undici vulnerable to Denial of Service via unrequested WebSocket subprotocol

undici vulnerable to downstream response splitting via retry interceptor

undici vulnerable to Denial of Service via orphaned RetryHandler response body

fastify vulnerable to request body replacement via an async validation result collision

fastify vulnerable to authentication bypass via malformed URLs reaching encapsulated not-found handlers

fastify vulnerable to header validation bypass via incomplete schema case normalization

fast-uri vulnerable to authority injection via an unvalidated port in serialize

fast-uri vulnerable to host confusion via an unclosed bracket in the URI authority

@fastify/http-proxy vulnerable to prefix escape via backslash dot-segments

multer vulnerable to Denial of Service via file descriptor leak on aborted uploads