CVE-2026-117518 - @fastify/reply-from vulnerable to path traversal via backslash dot-segment prefix escape
CVE ID :CVE-2026-117518 Published : 2. November 2026 10:39 | 24 Minuten ago Description :@fastify/reply-from is a Fastify plugin that forwards requests to an upstream HTTP server. In versions up to and including 12.8.0, the plugin validated proxy paths against forward-slash dot-segments only...