Vulnerabilities in @fastify/express

2 results
CVE-2026-6556CRITICAL@fastify/express vulnerable to middleware bypass via non-string mount paths in prefixed pluginsEPSS 0.5%CVE-2026-112362CRITICAL@fastify/express vulnerable to path-scoped middleware bypass via absolute-form request targetsEPSS 0.4%