Approved changes feed: RSS · Atom
cpe:2.3:a:fastify:websocket:*:*:*:*:*:node.js:*:*
part: a version: * update: *
| Vendor | Fastify (51747187-798b-5030-972d-b19db43759b4) |
|---|---|
| Product | Websocket (e9bab9d1-31f7-5627-bede-903601b62e76) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | node.js |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2022-39386 |
vulnerable | 2026-06-03 14:47:51.590377 |
fastify-websocket vulnerable to uncaught exception via crash on malformed packet
HIGH (7.5)
@fastify/websocket provides WebSocket support for Fastify. Any application using @fastify/websocket could crash if a specific, malformed packet is sent. All versions of fastify-websocket are also impacted. That module is deprecated, so it will not be patched. This has been patched in version 7.1.1 (fastify v4) and version 5.0.1 (fastify v3). There are currently no known workarounds. However, it should be possible to attach the error handler manually. The recommended path is upgrading to the patched versions.
Published: 2022-11-08T00:00:00.000Z
Updated: 2025-04-23T16:39:54.047Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.