← All credits
UlisesGascon
100 vulnerability records and advisories credit this contributor.
CVE-2026-5038
multer vulnerable to Denial of Service via incomplete cleanup of aborted uploads
CVE-2026-5079
multer vulnerable to Denial of Service via deeply nested field names
CVE-2026-33804
@fastify/middie vulnerable to middleware bypass via deprecated ignoreDuplicateSlashes option
CVE-2026-6270
@fastify/middie vulnerable to middleware authentication bypass in child plugin scopes
CVE-2026-6410
@fastify/static vulnerable to path traversal in directory listing
CVE-2026-6414
@fastify/static vulnerable to route guard bypass via encoded path separators
CVE-2026-33808
@fastify/express vulnerable to middleware authentication bypass via URL normalization gaps (duplicate slashes and semicolons)
CVE-2026-33807
@fastify/express vulnerable to middleware path doubling causing authentication bypass in child plugin scopes
CVE-2026-4923
path-to-regexp vulnerable to Regular Expression Denial of Service via multiple wildcards
CVE-2026-4867
path-to-regexp vulnerable to Regular Expression Denial of Service via multiple route parameters