Fastly vulnerabilities
We track 2 vulnerabilities in Fastly products across 3 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on August 13, 2025.
2vulnerabilities
0critical
2high
0exploited
7.5average CVSS score
Latest Fastly vulnerabilities
- 7.5 High severity
Enterprise Module for Development Tools: Improper Resource Shutdown or Release
A mismatch caused by client-triggered server-sent stream resets between HTTP/2 specifications and the internal architectures of some HTTP/2 implementations may result in excessive server resource consumption leading to denial-of-service (DoS). By opening strea
- 7.5 High severity
js-compute-runtime: Incorrect Usage of Seeds in Pseudo-Random Number Generator (PRNG)
The JS Compute Runtime for Fastly's Compute@Edge platform provides the environment JavaScript is executed in when using the Compute@Edge JavaScript SDK. In versions prior to 0.5.3, the `Math.random` and `crypto.getRandomValues` methods fail to use sufficiently