FA
Vendor
@fastify/middie
7
CVEs
0
On KEV
1
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-112712 | FA @fastify/middie @fastify/middie | 9.1 | Oct 20 | @fastify/middie vulnerable to path-scoped middleware bypass via scope prefix mismatch |
| CVE-2026-85184 | FA @fastify/middie @fastify/middie | 9.1 | Sep 4 | @fastify/middie vulnerable to path-scoped middleware bypass via absolute-form request target |
| CVE-2026-14181 | FA @fastify/middie @fastify/middie | 7.5 | Jul 1 | @fastify/middie standalone engine vulnerable to Denial of Service via malformed percent-encoded paths |
| CVE-2026-14198 | FA @fastify/middie @fastify/middie | 9.1 | Jul 1 | @fastify/middie vulnerable to authorization bypass via encoded slash in path parameter values |
| CVE-2026-33804 | FA @fastify/middie @fastify/middie | 9.1 | Apr 16 | @fastify/middie vulnerable to middleware bypass via deprecated ignoreDuplicateSlashes option |
| CVE-2026-6270 | FA @fastify/middie @fastify/middie | 9.1 | Apr 16 | @fastify/middie vulnerable to middleware authentication bypass in child plugin scopes |
| CVE-2026-2880 | FA @fastify/middie @fastify/middie | 9.1 | Feb 27 | @fastify/middie has an improper path normalization vulnerability |