[ Vendor · 1 CVEs ]

@fastify/secure-session

CVEs affecting @fastify/secure-session published in the last 30 days, plus any @fastify/secure-session CVE on CISA's exploited list.

CVEPublishedSeverityVulnerabilitySignals
CVE-2026-117549 2 Nov 2026 CVSS 4.2 @fastify/secure-session@fastify/secure-session is a session plugin for Fastify that stores an encrypted session in a cookie. In versions 7.5.0 through 8.4.1, when the…