FA
Product
@fastify/express
2
CVEs
0
On KEV
9.1
Max CVSS
1
New 30D
Severity mix
Critical 2High 0Medium 0Low 0
Watch
Add @fastify/express to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-112362 New | 9.1 | Oct 27 | @fastify/express vulnerable to path-scoped middleware bypass via absolute-form request targets Affected: 4.0.5 before 4.0.9 |
| CVE-2026-6556 | 9.1 | Jun 30 | @fastify/express vulnerable to middleware bypass via non-string mount paths in prefixed plugins Affected: before 4.0.7 |
Showing 2