← All credits
UlisesGascon
100 vulnerability records and advisories credit this contributor.
CVE-2026-84469
fastify vulnerable to request validation bypass via skipped boolean false schemas
CVE-2026-84504
fastify vulnerable to request body replacement via an async validation result collision
CVE-2026-85184
@fastify/middie vulnerable to path-scoped middleware bypass via absolute-form request target
CVE-2026-84428
fastify vulnerable to header validation bypass via incomplete schema case normalization
CVE-2026-84933
undici vulnerable to cross-user cookie disclosure via Set-Cookie caching in shared caches
CVE-2026-84947
undici vulnerable to response truncation via oversized chunked responses in the dump interceptor
CVE-2026-84961
undici vulnerable to TLS certificate validation bypass via dropped connect options in BalancedPool
CVE-2026-85008
undici vulnerable to caching and replay of unsafe HTTP method responses
CVE-2026-85014
undici vulnerable to Denial of Service via WebSocketStream unclean close
CVE-2026-4800
lodash vulnerable to Code Injection via `_.template` imports key names