Fastify 5 lifecycle

Current status

standard supportlow

Fastify 5 is currently in standard support.

Security: 4 tracked advisories affecting this line. Details below — lifecycle and vulnerability status are separate.

Official lifecycle source: Fastify npm releases

Support phase
standard support
End of life
Not officially published
Latest release
5.3.3
Released
13 May 2025

At a glance

Version line
5
Initial release
17 Sept 2024
Lifecycle phase
standard support
Latest stable
5.3.3
Latest release date
13 May 2025
EOL
Not officially published
Risk
low
Releases tracked
33

Lifecycle timeline

Phases from published LifecyclePeriod records. Missing phases are not inferred.

  1. Release

    17 Sept 2024

  2. standard supportcurrent

    17 Sept 2024 → —

    Source: Fastify npm releases

Fastify 5 is currently in standard support.

Security

Advisories affecting Fastify 5 (OSV.dev evidence). Known exploited status, due dates, and ransomware use from CISA KEV when matched.

Known vulnerabilities
4
Known exploited
0
Highest CVSS
  • CVE-2026-18504GHSA-w2qp-rph6-63g4

    fastify vulnerable to schema validation bypass via root primitive coercion mismatch

    Affected:
    <5.12.1
    Fixed in:
    5.12.1
    Source:
    OSV source · Advisory
  • CVE-2026-3635GHSA-444r-cwp2-x5xf

    fastify: request.protocol and request.host Spoofable via X-Forwarded-Proto/Host from Untrusted Connections

    Affected:
    <5.8.3
    Fixed in:
    5.8.3
    Source:
    OSV source · Advisory
  • CVE-2026-25224GHSA-mrq3-vjjr-p77c

    Fastify Vulnerable to DoS via Unbounded Memory Allocation in sendWebStream

    Affected:
    <5.7.3
    Fixed in:
    5.7.3
    Source:
    OSV source · Advisory
  • CVE-2026-25223GHSA-jx2c-rxcm-jvmq

    Fastify's Content-Type header tab character allows body validation bypass

    Affected:
    <5.7.2
    Fixed in:
    5.7.2
    Source:
    OSV source · Advisory

Latest release

5.3.3

Released 13 May 2025 · stable

https://registry.npmjs.org/fastify/5.3.3

Previous releases

  • 5.4.0

    12 Jun 2025

  • 5.5.0

    11 Aug 2025

  • 5.3.2

    18 Apr 2025

Release history

33 concrete releases tracked for this line.

VersionRelease dateChannelSource
5.3.218 Apr 2025stableSource
5.3.313 May 2025stableSource
5.4.012 Jun 2025stableSource
5.5.011 Aug 2025stableSource
5.6.05 Sept 2025stableSource
5.6.122 Sept 2025stableSource
5.6.29 Nov 2025stableSource
5.7.015 Jan 2026stableSource
5.7.116 Jan 2026stableSource
5.7.226 Jan 2026stableSource
5.7.32 Feb 2026stableSource
5.7.42 Feb 2026stableSource
5.8.05 Mar 2026stableSource
5.8.15 Mar 2026stableSource
5.8.27 Mar 2026stableSource
5.8.323 Mar 2026stableSource
5.8.423 Mar 2026stableSource
5.8.514 Apr 2026stableSource
5.9.028 Jun 2026stableSource
5.10.05 Jul 2026stableSource
5.11.030 Jul 2026stableSource
5.11.13 Aug 2026stableSource
5.11.23 Aug 2026stableSource
5.0.017 Sept 2024stableSource
5.1.031 Oct 2024stableSource

Release activity

Total releases
33
Last 30 days
3
Last 90 days
8
Avg. interval
~22 days
Most recent
13 May 2025

Should I use this version?

Suitable for new deployments

Fastify 5 is currently supported (standard support).

Version comparison

Compact comparison against the nearest relevant release lines.

54
Statusstandard supportstandard support
Latest release5.12.14.26.1
EOLNot publishedNot published
Risklowlow

Sources

Where this information comes from.

Lifecycle sources

Release sources

Data coverage

Last checked = last successful upstream check. Latest source update = when upstream content last changed.

Releases tracked
33
Lifecycle periods
1
EOL
Not officially published
Provenance records
2
Data last checked
2 Sept 2026
Latest source update
2 Sept 2026

EOL: Not officially published

Other Fastify versions