What’s Vulnerable › Products
Fastify/Express vulnerabilities
3 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.
Check whether your Fastify/Express version is affected
Latest Fastify/Express vulnerabilities
- CVE-2026-6556 — @fastify/express vulnerable to middleware bypass via non-string mount paths in prefixed plugins (CVSS 9.1)
- CVE-2026-33808 — @fastify/express vulnerable to middleware authentication bypass via URL normalization gaps (duplicate slashes and semicolons) (CVSS 9.1)
- CVE-2026-33807 — @fastify/express vulnerable to middleware path doubling causing authentication bypass in child plugin scopes (CVSS 9.1)