CVE-2026-120213 - @fastify/http-proxy vulnerable to prefix escape via decoded route parameters
CVE ID :CVE-2026-120213 Published : 2. November 2026 10:15 | 48 Minuten ago Description :@fastify/http-proxy is a Fastify plugin that proxies HTTP requests to an upstream server under a configured prefix. In versions 9.0.0 through 11.6.5, when an application uses parameterized prefix and...