# What changed in @fastify/reply-from

> 5 changes in @fastify/reply-from 12 from its official release notes, upgrade guides and advisories: 3 security. Each one cited. Sources checked 2026-10-19. HTML: https://unstale.sh/npm/@fastify/reply-from/

To see which of these apply to a repository, run `npx @unstale/cli init` in it.

## @fastify/reply-from 12

### Security

- Fixes the security issue identified in GHSA-j425-jw94-m29r. (12.7.0) — [release notes](https://github.com/fastify/fastify-reply-from/releases/tag/v12.7.0)
- Fastify's connection header abuse enables stripping of proxy-added headers (12.6.2) — [security advisory](https://github.com/advisories/GHSA-GWHP-PF74-VJ37)
- fastify-reply-from affected by bypass of reply forwarding (12.5.0) — [security advisory](https://github.com/advisories/GHSA-2Q7R-29RG-6M5H)

### Fixes and other changes

- The onError handler now preserves the original error as the cause. (12.6.5) — [release notes](https://github.com/fastify/fastify-reply-from/releases/tag/v12.6.5)
- Undici request handling was improved. (12.6.5) — [release notes](https://github.com/fastify/fastify-reply-from/releases/tag/v12.6.5)