Skip to contentFastify Fastify\/middie vulnerabilities
- @fastify/middie, fastify fastify\/middie +1 more@fastify/middie vulnerable to path-scoped middleware bypass via absolute-form request targetCVE-2026-851849.1 Critical
- @fastify/middie, fastify fastify\/middie +1 more@fastify/middie standalone engine vulnerable to Denial of Service via malformed percent-encoded pathsCVE-2026-141817.5 High
- @fastify/middie, fastify fastify\/middie +1 more@fastify/middie vulnerable to authorization bypass via encoded slash in path parameter valuesCVE-2026-141989.1 Critical
- @fastify/middie, fastify fastify\/middie +1 more@fastify/middie vulnerable to middleware bypass via deprecated ignoreDuplicateSlashes optionCVE-2026-33804Fix available7.4 High
- @fastify/middie, fastify fastify\/middie +1 more@fastify/middie vulnerable to middleware authentication bypass in child plugin scopesCVE-2026-6270Fix available9.1 Critical
- @fastify/middie, fastify fastify\/middie +1 more@fastify/middie has an improper path normalization vulnerabilityCVE-2026-2880Fix available8.2 High
- fastify middie, fastify\/middie +1 moreFastify Middie Middleware Path BypassCVE-2026-22031Fix available8.4 High