-
Notifications
You must be signed in to change notification settings - Fork 337
chore(fastify): Update dependency fastify to v5.3.2 [SECURITY] #5667
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
base: main
Are you sure you want to change the base?
Conversation
The latest updates on your projects. Learn more about Vercel for Git ↗︎
|
|
d1d59f7
to
2cb4293
Compare
2cb4293
to
232ecf2
Compare
232ecf2
to
bc72892
Compare
bc72892
to
3d3f8c0
Compare
3d3f8c0
to
f62edc8
Compare
f62edc8
to
718c9a8
Compare
718c9a8
to
39c9a0e
Compare
39c9a0e
to
35bd777
Compare
35bd777
to
2670a83
Compare
2670a83
to
796d143
Compare
796d143
to
08f88d9
Compare
08f88d9
to
86cf03d
Compare
88c6463
to
545156e
Compare
545156e
to
1db0888
Compare
1db0888
to
857eccd
Compare
857eccd
to
ccbbc62
Compare
ccbbc62
to
2a57cee
Compare
2a57cee
to
ab8021e
Compare
ab8021e
to
b7378bd
Compare
b7378bd
to
a58be49
Compare
a58be49
to
d6c954a
Compare
d6c954a
to
7f4448d
Compare
7f4448d
to
e535bc0
Compare
e535bc0
to
9d98152
Compare
9d98152
to
0113608
Compare
0113608
to
7b936c5
Compare
This PR contains the following updates:
5.0.0
->5.3.2
Warning
Some dependencies could not be looked up. Check the Dependency Dashboard for more information.
GitHub Vulnerability Alerts
CVE-2025-32442
Impact
In applications that specify different validation strategies for different content types, it's possible to bypass the validation by providing a slightly altered content type such as with different casing or altered whitespacing before
;
.Users using the the following pattern are affected:
User using the following pattern are not affected:
Patches
This was patched in v5.3.1, but unfortunately it did not cover all problems. This has been fully patched in v5.3.2.
Workarounds
Do not specify multiple content types in the schema.
References
Are there any links users can visit to find out more?
https://hackerone.com/reports/3087928
Release Notes
fastify/fastify (fastify)
v5.3.2
Compare Source
v5.3.1
Compare Source
v5.3.0
Compare Source
What's Changed
[kState].readyPromise
for garbage collection by @LiviaMedeiros in https://github.com/fastify/fastify/pull/6030New Contributors
Full Changelog: fastify/fastify@v5.2.2...v5.3.0
v5.2.2
Compare Source
What's Changed
done
function by @gurgunday in https://github.com/fastify/fastify/pull/5937@fastify/otel
to core list by @Fdawgs in https://github.com/fastify/fastify/pull/59670.0.0.0
by @jonasongg in https://github.com/fastify/fastify/pull/5988New Contributors
Full Changelog: fastify/fastify@v5.2.1...v5.2.2
v5.2.1
Compare Source
What's Changed
proxy-addr
with@fastify/proxy-addr
by @Fdawgs in https://github.com/fastify/fastify/pull/5913New Contributors
Full Changelog: fastify/fastify@v5.2.0...v5.2.1
v5.2.0
Compare Source
What's Changed
fastify-mongo-sanitize
andremix-fastify
to comm. by @ExorTek in https://github.com/fastify/fastify/pull/5822node:
prefix to bypass require.cache call for builtins by @Fdawgs in https://github.com/fastify/fastify/pull/5894node:
prefix for builtins by @Fdawgs in https://github.com/fastify/fastify/pull/5896New Contributors
Full Changelog: fastify/fastify@v5.1.0...v5.2.0
v5.1.0
Compare Source
What's Changed
.exec()
with.test()
by @Fdawgs in https://github.com/fastify/fastify/pull/5750New Contributors
Full Changelog: fastify/fastify@v5.0.0...v5.1.0
Configuration
📅 Schedule: Branch creation - "" in timezone GMT, Automerge - At any time (no schedule defined).
🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.