What’s Vulnerable › Products
fastify middie vulnerabilities
7 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 7 published in the last 12 months.
Check whether your fastify middie version is affected
Latest fastify middie vulnerabilities
- CVE-2026-85184 — @fastify/middie vulnerable to path-scoped middleware bypass via absolute-form request target (CVSS 9.1)
- CVE-2026-14198 — @fastify/middie vulnerable to authorization bypass via encoded slash in path parameter values (CVSS 9.1)
- CVE-2026-14181 — @fastify/middie standalone engine vulnerable to Denial of Service via malformed percent-encoded paths (CVSS 7.5)
- CVE-2026-33804 — @fastify/middie vulnerable to middleware bypass via deprecated ignoreDuplicateSlashes option (CVSS 9.1)
- CVE-2026-6270 — @fastify/middie vulnerable to middleware authentication bypass in child plugin scopes (CVSS 9.1)
- CVE-2026-2880 — @fastify/middie has an improper path normalization vulnerability (CVSS 9.1)
- CVE-2026-22031 — Fastify Middie Middleware Path Bypass (CVSS 8.8)