fastify-reply-from bypass of reply forwarding

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2025-66415 · Microsoft / collected KEV context

EUVD-2025-200117

GHSA-2q7r-29rg-6m5h

cve-program · CVE-2025-66415

• https://github.com/fastify/fastify-reply-from/security/advisories/GHSA-2q7r-29rg-6m5h
• https://github.com/fastify/fastify-reply-from/commit/4d9795cd5b57a36756d37b7f036eae369f69fa66

euvd · EUVD-2025-200117

• https://github.com/fastify/fastify-reply-from/security/advisories/GHSA-2q7r-29rg-6m5h
• https://github.com/fastify/fastify-reply-from/commit/4d9795cd5b57a36756d37b7f036eae369f69fa66

nvd · CVE-2025-66415

• https://github.com/fastify/fastify-reply-from/commit/4d9795cd5b57a36756d37b7f036eae369f69fa66
• https://github.com/fastify/fastify-reply-from/security/advisories/GHSA-2q7r-29rg-6m5h

osv · GHSA-2q7r-29rg-6m5h

• https://github.com/fastify/fastify-reply-from/security/advisories/GHSA-2q7r-29rg-6m5h
• https://nvd.nist.gov/vuln/detail/CVE-2025-66415
• https://github.com/fastify/fastify-reply-from/commit/4d9795cd5b57a36756d37b7f036eae369f69fa66
• https://github.com/fastify/fastify-reply-from

No related operational record is retained in the current change model.