This is a security release for GHSA-r799-r9gc-m956 (CVE-2026-90982).
It fixes a route guard and allowedPath bypass on case-insensitive filesystems. Users should upgrade to @fastify/static 10.1.4.
Full Changelog: v10.1.3...v10.1.4
This is a security release for GHSA-r799-r9gc-m956 (CVE-2026-90982).
It fixes a route guard and allowedPath bypass on case-insensitive filesystems. Users should upgrade to @fastify/static 10.1.4.
Full Changelog: v10.1.3...v10.1.4