Vexday
by TrueHacking
Vulnerabilities
▾
Vulnerabilities
CVEs
361k vulnerabilities
CVE risk calculator
real risk of a CVE
Exploits
Cataloged PoCs, Nuclei and Metasploit
Exploit Timeline
risk queue
Overview
observatory
Intelligence
▾
Intelligence
Board Intelligence
The day's cyber risk in one number the board understands
Threat Actors
524 groups tracked
Time-bomb CVEs
about to blow: patch now
Threats
ransomware · malware
Incidents
Breaches with a confidence seal
IOCs
live attack indicators
Threats to Brazil
victims and groups in Brazil
Exposure by sector
ransomware by sector in Brazil
Tools
▾
Tools
X-Ray
your stack vs. real attack
Check IP
IP reputation in seconds
Check scam site
fake store? check first
Check shortened link
where does this link go?
Analyze phishing email
is this email a scam?
Analyze email header
is the sender spoofed?
Email breach check
breach monitoring
Briefing
Live
My Dashboard
PT
ES
EN
›
Live
Vulnerabilities
CVEs
CVE risk calculator
Exploits
Exploit Timeline
Overview
Intelligence
Board Intelligence
Threat Actors
Time-bomb CVEs
Threats
Incidents
IOCs
Threats to Brazil
Exposure by sector
Tools
X-Ray
Check IP
Check scam site
Check shortened link
Analyze phishing email
Analyze email header
Email breach check
My Dashboard
PT
ES
EN
Home
/
Technologies
/
@fastify/reply-from
Vulnerabilities in
@fastify/reply-from
2 results
CVE-2026-33805
CRITICAL
@fastify/reply-from vulnerable to connection header abuse enabling stripping of proxy-added headers
EPSS
0.4%
CVE-2026-16158
HIGH
@fastify/reply-from vulnerable to cross-upstream request routing via URL cache key collision
EPSS
0.2%