Aikido Intel
Secure My Code
Package Health

@fastify/static

Plugin for serving static files as fast as possible.

Latest 10.1.6NPMNPM

97%

Total Score

healthy

Frequent releases, active contributors, trusted publishing, and clean workflows indicate a well-maintained release.

Are you affected? Scan for Free

Health Score Breakdown

All health scores are okay.

Vulnerabilities

TitleVersionsSeverity
AIKIDO-2026-221297
@fastify/static is vulnerable to Path Traversal in versions 0.0.1 - 10.1.2.
0.0.1 - 10.1.2
High
AIKIDO-2026-858658
@fastify/static is vulnerable to Authorization Bypass in versions 5.0.0 - 10.1.1.
5.0.0 - 10.1.1
Medium
AIKIDO-2026-304658
@fastify/static is vulnerable to Path Traversal in versions 5.0.0 - 10.1.0.
5.0.0 - 10.1.0
High
CVE-2026-6410
@fastify/static is vulnerable to Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in versions 8.0.0 - 9.1.0.
8.0.0 - 9.1.0
Medium
CVE-2026-6414
@fastify/static is vulnerable to Improper Handling of URL Encoding (Hex Encoding) in versions 8.0.0 - 9.1.0.
8.0.0 - 9.1.0
Medium

Package versions

Maintainers

matteo.collina
eomm
tony133

Direct Dependencies

DependencyLast ReleaseScore
glob
Version ^13.0.0
—
—
fastq
Version ^1.17.1
—
—
@fastify/send
Version ^4.0.0
—
—
@fastify/error
Version ^4.0.0
—
—
fastify-plugin
Version ^6.0.0
—
—

Weekly Downloads

Info

Last Published
1 day ago
Created
4 years ago
Unpacked Size
0.5 MB

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Scan for Free
Book a Demo

Free. No credit card required.

Aikido Platform
Subscribe
Stay up to date with all updates

I consent to receiving marketing communications based on Aikido’s Privacy Policy.

LinkedIn YouTube X
© 2026 Aikido Security BV | BE0792914919
Ghent, Belgium | San Francisco, US
SOC 2SOC 2Compliant
ISO 27001ISO 27001Compliant
ISO 42001ISO 42001Compliant
FedRAMPFedRAMPImplementing

© All Intel data is openly available and commercially licensed.