Threats affecting pkg:npm/@fastify/reply-from

@fastify/reply-from versions up to 12.8.0 contain a path traversal vulnerability due to improper validation of backslash dot-segments in proxy paths. This allows unauthenticated requests to bypass intended upstream path restrictions and access unintended resources. The vulnerability is fixed in version 12.8.1 by normalizing paths and rejecting unsafe segments before URL construction.