[ Vendor · 1 CVEs ]
@fastify/oauth2
CVEs affecting @fastify/oauth2 published in the last 30 days, plus any @fastify/oauth2 CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-110008 | 19 Oct 2026 | CVSS 4.2 | @fastify/oauth2@fastify/oauth2 is a Fastify wrapper for OAuth2 login flows. In versions 7.2.0 through 8.3.1, the state and code-verifier cookies are set without a… |