@fastify/passport (npm) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the npm package @fastify/passport, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (2)

• CVE-2023-29019 — CVSS 8.1 (high): @fastify/passport is a port of passport authentication library for the Fastify ecosystem. Applications using `@fastify/passport` in…
• CVE-2023-29020 — CVSS 6.5 (medium): @fastify/passport is a port of passport authentication library for the Fastify ecosystem. The CSRF (Cross-Site Request Forger) protection…