CyberSecBulletin

@fastify/auth vulnerabilities

We track 1 vulnerability in @fastify/auth products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on September 16, 2026.

1vulnerabilities
0critical
1high
0exploited
8.1average CVSS score

Latest @fastify/auth vulnerabilities

  • 8.1 High severity

    @fastify/auth: Improper Authorization

    CVE-2026-92087@fastify/auth

    @fastify/auth is a Fastify plugin that composes multiple authentication and authorization strategies into a single route guard. In versions 5.0.0 through 5.1.0, when strategies are composed with the relation "or" option together with the run "all" option and o