[ Vendor · 1 CVEs ]
@fastify/session
CVEs affecting @fastify/session published in the last 30 days, plus any @fastify/session CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-117499 | 27 Oct 2026 | CVSS 3.7 | @fastify/session@fastify/session is a session plugin for Fastify. In all releases before 11.1.6, with the default rolling session behavior, a request that restored a… |