fastify
Fast and low overhead web framework, for Node.js
94%
Total Score
healthy
Fastify is actively maintained, well documented, licensed, and supported by broad contributor activity.
Health Score Breakdown
All 20 workflows were analyzed, all 54 action references are pinned, and every workflow has read-only permissions. A high-confidence template-injection finding and low-confidence-independent adhoc package installation are workflow hygiene concerns, but no untrusted checkout or script-injection sink was reported in the audited trigger paths.
Vulnerabilities
| Title | Versions | Severity |
|---|---|---|
CVE-2026-92081 fastify is vulnerable to Uncaught Exception in versions 0.0.0 - 5.12.5. | 0.0.0 - 5.12.5 | Medium |
AIKIDO-2026-329897 fastify is vulnerable to Request Validation Bypass in versions 0.0.1 - 5.12.1. | 0.0.1 - 5.12.1 | High |
AIKIDO-2026-349253 fastify is vulnerable to Authentication Bypass in versions 4.0.0 - 5.12.1. | 4.0.0 - 5.12.1 | High |
AIKIDO-2026-530080 fastify is vulnerable to Request Validation Bypass in versions 0.0.1 - 5.12.1. | 0.0.1 - 5.12.1 | High |
AIKIDO-2026-94607 fastify is vulnerable to Header Validation Bypass in versions 0.0.1 - 5.12.1. | 0.0.1 - 5.12.1 | High |
Package versions
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 pino Version ^9.14.0 || ^10.1.0 | — | — |
rfdc Version ^1.3.1 | — | — |
avvio Version ^9.0.0 | — | — |
semver Version ^7.6.0 | — | — |
toad-cache Version ^3.7.0 | — | — |
Weekly Downloads
Info
- Last Published
- 1 day ago
- Created
- 10 years ago
- Unpacked Size
- 2.9 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.