UlisesGascon

undici vulnerable to downstream response desynchronization via retry interceptor

@fastify/static vulnerable to Authorization Bypass via Non-Canonical URL Paths

@fastify/static vulnerable to route guard bypass via path traversal

@fastify/http-proxy vulnerable to prefix escape via WebSocket path traversal

@fastify/http-proxy vulnerable to prefix escape via URL-encoded characters

lodash vulnerable to Prototype Pollution via array path bypass in `_.unset` and `_.omit`

fastify vulnerable to Body Schema Validation Bypass via Leading Space in Content-Type Header

@fastify/reply-from vulnerable to connection header abuse enabling stripping of proxy-added headers

body-parser vulnerable to denial of service when invalid limit value silently disables size enforcement

webpack-dev-server vulnerable to cross-site request forgery via internal developer endpoints