Skip to content

fastify: request.protocol and request.host Spoofable via X-Forwarded-Proto/Host from Untrusted Connections

Moderate severity GitHub Reviewed Published Mar 23, 2026 in fastify/fastify • Updated Mar 25, 2026

No open alerts for this advisory

Give feedback on Dependabot alerts