@fastify/express @fastify/express vulnerabilities

• @fastify/express @fastify/express vulnerable to path-scoped middleware bypass via absolute-form request targets CVE-2026-112362 9.1 CriticalOctober 27, 2026
• @fastify/express, fastify fastify\/express +1 more @fastify/express vulnerable to middleware bypass via non-string mount paths in prefixed plugins CVE-2026-6556 9.1 CriticalJune 30, 2026