Fastly

8 CVEs across 4 Fastly products. Browse Fastly vulnerabilities, severities, and proof-of-concept exploits.

Fastly products with known CVEs

ProductCVEs
Fastly5
Js-Compute-Runtime2
H201
Js-Compute1
Fastly CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2025-58199Medium4.32025-09-22Cross-Site Request Forgery (CSRF) vulnerability in Fastly Fastly fastly allows Cross Site Request Forgery.This issue affects Fastly: from n/a through <= 1.2.28.
CVE-2025-8671High7.52025-08-13A mismatch caused by client-triggered server-sent stream resets between HTTP/2 specifications and the internal architectures of some HTTP/2 implementations may…
CVE-2024-38375Medium5.32024-06-26@fastly/js-compute is a JavaScript SDK and runtime for building Fastly Compute applications. The implementation of several functions were determined to include…
CVE-2024-34768Medium5.32024-06-11Missing Authorization vulnerability in Fastly.This issue affects Fastly: from n/a through 1.2.25.
CVE-2024-34803Medium4.32024-06-03Missing Authorization vulnerability in Fastly.This issue affects Fastly: from n/a through 1.2.25.
CVE-2015-10094Low2.42023-03-06A vulnerability was found in Fastly Plugin up to 0.97 on WordPress. It has been rated as problematic. Affected by this issue is the function post of the file l…
CVE-2022-39218High7.52022-09-20The JS Compute Runtime for Fastly's Compute@Edge platform provides the environment JavaScript is executed in when using the Compute@Edge JavaScript SDK. In ver…
CVE-2017-13761Medium6.52017-09-14The Fastly CDN module before 1.2.26 for Magento2, when used with a third-party authentication plugin, might allow remote authenticated users to obtain sensitiv…