Skip to content

v10.1.4

Latest

Choose a tag to compare

@mcollina mcollina released this 17 Sep 07:47
a39a464

This is a security release for GHSA-r799-r9gc-m956 (CVE-2026-90982).

It fixes a route guard and allowedPath bypass on case-insensitive filesystems. Users should upgrade to @fastify/static 10.1.4.

Full Changelog: v10.1.3...v10.1.4