Skip to content
Heist/ feed
Back to feed
UnratedFix available

fasthttp v1.76.0

Type: patchSources: fasthttp

fasthttp v1.76.0 hardens HTTP framing, multipart parsing, virtual-host file isolation, and server connection handling. It also reduces CPU amplification from crafted trailer sets.

Products
fasthttp
Affected versions
Not specified
Fixed versions
v1.76.0
CVEs
Not specified
Confirmed fixed CVEs
Not specified
Updated in this feed
30 Oct 2026, 16:52 UTC · Revision 1

Source evidence

fasthttp v1.76.0

github-valyala-fasthttp · Original source

Published 19 Oct 2026, 01:14 UTC

fasthttp v1.76.0 hardens HTTP framing, multipart parsing, virtual-host file isolation, and server connection handling. It also reduces CPU amplification from crafted trailer sets.

v1.76.0 strengthens HTTP message framing, static-file isolation, and server connection handling.

fasthttp

Fixed versions: v1.76.0

Prerequisites: FS handlers using NewVHostPathRewriter

Complete source record
{
  "id": "eefeec692b5c18d74745de78c8734ac615abaa172d916645fba09f9b8aa53451",
  "url": "https://github.com/valyala/fasthttp/releases/tag/v1.76.0",
  "method": "llm",
  "payload": {
    "kind": "patch",
    "title": "fasthttp v1.76.0",
    "summary": "fasthttp v1.76.0 hardens HTTP framing, multipart parsing, virtual-host file isolation, and server connection handling. It also reduces CPU amplification from crafted trailer sets.",
    "evidence": "v1.76.0 strengthens HTTP message framing, static-file isolation, and server connection handling.",
    "products": [
      {
        "name": {
          "value": "fasthttp",
          "evidence": "Release notes from fasthttp"
        },
        "prerequisites": [
          {
            "value": "FS handlers using NewVHostPathRewriter",
            "evidence": "This affects FS handlers using NewVHostPathRewriter."
          }
        ],
        "fixed_versions": [
          {
            "value": "v1.76.0",
            "evidence": "v1.76.0"
          }
        ],
        "affected_versions": []
      }
    ],
    "severity": "unknown",
    "fixed_cves": [],
    "related_cves": [],
    "security_relevant": true,
    "severity_evidence": null
  },
  "source_id": "github-valyala-fasthttp",
  "document_id": 22831,
  "published_at": "2026-10-19T01:14:32+00:00"
}