FA
Product
fastify-express
4
CVEs
0
On KEV
9.1
Max CVSS
0
New 30D
Severity mix
Critical 3High 1Medium 0Low 0
Watch
Add fastify-express to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-6556 | 9.1 | Jun 30 | @fastify/express vulnerable to middleware bypass via non-string mount paths in prefixed plugins Affected: before 4.0.7 |
| CVE-2026-33807 | 9.1 | Apr 15 | @fastify/express vulnerable to middleware path doubling causing authentication bypass in child plugin scopes Affected: before 4.0.5 |
| CVE-2026-33808 | 9.1 | Apr 15 | @fastify/express vulnerable to middleware authentication bypass via URL normalization gaps (duplicate slashes and semicolons) Affected: before 4.0.5 |
Showing 3
