fastify
Fast and low overhead web framework, for Node.js
96%
Total Score
healthy
Frequent releases, active contributors, and an unarchived organization-backed repository outweigh a limited workflow hygiene concern.
Health Score Breakdown
All 20 workflows were analyzed, all 54 action references were pinned, and all workflows used read-only permissions. A high-confidence template-injection finding and a low-confidence hygiene finding for installing a package outside a lockfile warrant attention, but no untrusted checkout or script injection was found and the reported trigger paths do not establish a dangerous combination.
Vulnerabilities
| Title | Versions | Severity |
|---|---|---|
CVE-2026-92081 fastify is vulnerable to Uncaught Exception in versions 0.0.0 - 5.12.5. | 0.0.0 - 5.12.5 | Medium |
AIKIDO-2026-329897 fastify is vulnerable to Request Validation Bypass in versions 0.0.1 - 5.12.1. | 0.0.1 - 5.12.1 | High |
AIKIDO-2026-349253 fastify is vulnerable to Authentication Bypass in versions 4.0.0 - 5.12.1. | 4.0.0 - 5.12.1 | High |
AIKIDO-2026-530080 fastify is vulnerable to Request Validation Bypass in versions 0.0.1 - 5.12.1. | 0.0.1 - 5.12.1 | High |
AIKIDO-2026-94607 fastify is vulnerable to Header Validation Bypass in versions 0.0.1 - 5.12.1. | 0.0.1 - 5.12.1 | High |
Package versions
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 pino Version ^9.14.0 || ^10.1.0 | — | — |
rfdc Version ^1.3.1 | — | — |
avvio Version ^9.0.0 | — | — |
semver Version ^7.6.0 | — | — |
toad-cache Version ^3.7.0 | — | — |
Weekly Downloads
Info
- Last Published
- 36 minutes ago
- Created
- 10 years ago
- Unpacked Size
- 2.9 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.