CRITICAL9.1npm
GHSA-72c6-fx6q-fr5w· CVE-2026-6270@fastify/middie vulnerable to middleware authentication bypass in child plugin scopes
Modified: 7/8/2026
package
npm/@fastify/middie
pkg:npm/%40fastify/middie
HIGHnpm
GHSA-8p85-9qpw-fwgw· CVE-2026-2880@fastify/middie has Improper Path Normalization when Using Path-Scoped Middleware
Modified: 2/28/2026
HIGH8.4npm
GHSA-cxrg-g7r8-w69p· CVE-2026-22031Fastify Middie Middleware Path Bypass
Modified: 7/8/2026
HIGH7.4npm
GHSA-v9ww-2j6r-98q6· CVE-2026-33804@fastify/middie vulnerable to middleware bypass via deprecated ignoreDuplicateSlashes option
Modified: 4/16/2026