2 just released! Patches CVE-2026-7120: @ fastify /static vulnerable to authorization bypass via non-canonical URL paths.
No BS check run yet — press ⚖ to extract this story's claims and verify them against independent sources.
🚨 Medium-severity security fix in @ fastify /static@10.1.2 just released! Patches CVE-2026-7120: @ fastify /static vulnerable to authorization bypass via non-canonical URL paths. https:// github.com/fastify/fastify-sta tic/security/advisories/GHSA-8pvw-jcv7-9cmj
🚨 High-severity security fix in @ fastify /static@10.1.1 just released! Patches CVE-2026-15074: @ fastify /static vulnerable to route guard bypass via path traversal. https:// github.com/fastify/fastify-sta tic/security/advisories/GHSA-83w8-p2f5-377r