Skip to content
@fastify/middie vulnerabilities
Newest
-
@fastify/middie
@fastify/middie vulnerable to path-scoped middleware bypass via scope prefix mismatch
CVE-2026-112712
Fix available
9.1 Critical
-
@fastify/middie, fastify fastify\/middie +1 more
@fastify/middie vulnerable to path-scoped middleware bypass via absolute-form request target
CVE-2026-85184
9.1 Critical
-
@fastify/middie, fastify fastify\/middie +1 more
@fastify/middie standalone engine vulnerable to Denial of Service via malformed percent-encoded paths
CVE-2026-14181
7.5 High
-
@fastify/middie, fastify fastify\/middie +1 more
@fastify/middie vulnerable to authorization bypass via encoded slash in path parameter values
CVE-2026-14198
9.1 Critical
-
@fastify/middie, fastify fastify\/middie +1 more
@fastify/middie vulnerable to middleware bypass via deprecated ignoreDuplicateSlashes option
CVE-2026-33804
Fix available
7.4 High
-
@fastify/middie, fastify fastify\/middie +1 more
@fastify/middie vulnerable to middleware authentication bypass in child plugin scopes
CVE-2026-6270
Fix available
9.1 Critical
-
@fastify/middie, fastify fastify\/middie +1 more
@fastify/middie has an improper path normalization vulnerability
CVE-2026-2880
Fix available
8.2 High