CVE Tracker: vulnerabilities by vendor, severity and exploitation status

CVE Tracker

4 records

Every published CVE from the last 120 days with CVSS score, vendor and product, cross-referenced against CISA's Known Exploited Vulnerabilities catalog. 10 added to KEV in the last 7 days.

SeverityAll critical high medium lowExploitedIn CISA KEV

CVE	CVSS	Severity	Vendor / product	Summary	Published
CVE-2026-16117	10	critical	fastify / fastify\/http-proxy	Impact: @fastify/http-proxy versions up to and including 11.5.0 fail to rewrite the request prefix when the prefix	49d ago
CVE-2026-18248	9.1	critical	fastify / fastify\/aws-lambda	@fastify/aws-lambda version 6.4.0 decorates each Fastify request with request.awsLambda.event and request.awsLambd	33d ago
CVE-2026-14198	9.1	critical	fastify / fastify\/middie	@fastify/middie versions 9.1.0 through 9.3.2 decode the encoded slash %2F inside path parameter values before matc	66d ago
CVE-2026-6556	9.1	critical	fastify / fastify\/express	@fastify/express versions 4.0.6 and earlier only rewrite the plugin prefix for middleware mount paths when the path	67d ago

Sources: NIST National Vulnerability Database (descriptions, CVSS, CPE) and CISA Known Exploited Vulnerabilities catalog (exploitation status). Both are United States government works in the public domain. Data refreshes daily; KEV hourly.

Loading

CVE Tracker