UnratedFix available
fasthttp v1.76.0
Type: patchSources: fasthttp
fasthttp v1.76.0 hardens HTTP framing, multipart parsing, virtual-host file isolation, and server connection handling. It also reduces CPU amplification from crafted trailer sets.
- Products
- fasthttp
- Affected versions
- Not specified
- Fixed versions
- v1.76.0
- CVEs
- Not specified
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 30 Oct 2026, 16:52 UTC · Revision 1
Source evidence
fasthttp v1.76.0 hardens HTTP framing, multipart parsing, virtual-host file isolation, and server connection handling. It also reduces CPU amplification from crafted trailer sets.
v1.76.0 strengthens HTTP message framing, static-file isolation, and server connection handling.
fasthttp
Fixed versions: v1.76.0
Prerequisites: FS handlers using NewVHostPathRewriter
Complete source record
{
"id": "eefeec692b5c18d74745de78c8734ac615abaa172d916645fba09f9b8aa53451",
"url": "https://github.com/valyala/fasthttp/releases/tag/v1.76.0",
"method": "llm",
"payload": {
"kind": "patch",
"title": "fasthttp v1.76.0",
"summary": "fasthttp v1.76.0 hardens HTTP framing, multipart parsing, virtual-host file isolation, and server connection handling. It also reduces CPU amplification from crafted trailer sets.",
"evidence": "v1.76.0 strengthens HTTP message framing, static-file isolation, and server connection handling.",
"products": [
{
"name": {
"value": "fasthttp",
"evidence": "Release notes from fasthttp"
},
"prerequisites": [
{
"value": "FS handlers using NewVHostPathRewriter",
"evidence": "This affects FS handlers using NewVHostPathRewriter."
}
],
"fixed_versions": [
{
"value": "v1.76.0",
"evidence": "v1.76.0"
}
],
"affected_versions": []
}
],
"severity": "unknown",
"fixed_cves": [],
"related_cves": [],
"security_relevant": true,
"severity_evidence": null
},
"source_id": "github-valyala-fasthttp",
"document_id": 22831,
"published_at": "2026-10-19T01:14:32+00:00"
}