CVE-2026-117518 | Fastify reply-from up to 12.8.0 URL Parser path traversal

November 2, 2026 Yanac

A vulnerability labeled as critical has been found in Fastify reply-from up to 12.8.0. This issue affects some unknown processing of the component URL Parser. Executing a manipulation can lead to path traversal.

This vulnerability is handled as CVE-2026-117518. The attack can be executed remotely. There is not any exploit available.

The affected component should be upgraded.VulDB Recent EntriesRead More