FA
Product
fastify-express
by fastify · last CVE Jun 30, 2026
4
CVEs
0
On KEV
9.1
Max CVSS
0
New 30D
Severity mix
Critical 3High 1Medium 0Low 0
Watch

Add fastify-express to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-6556
9.1
1%
Jun 30
@fastify/express vulnerable to middleware bypass via non-string mount paths in prefixed plugins
Affected: before 4.0.7
CVE-2026-33807
9.1
0%
Apr 15
@fastify/express vulnerable to middleware path doubling causing authentication bypass in child plugin scopes
Affected: before 4.0.5
CVE-2026-33808
9.1
0%
Apr 15
@fastify/express vulnerable to middleware authentication bypass via URL normalization gaps (duplicate slashes and semicolons)
Affected: before 4.0.5
CVE-2026-22037
8.4
0%
Jan 19
@fastify/express vulnerable to Improper Handling of URL Encoding (Hex Encoding)
Affected: < 4.0.3
Showing 4