Vulnerabilities in @fastify/middie
6 resultsCVE-2026-6270CRITICAL@fastify/middie vulnerable to middleware authentication bypass in child plugin scopesEPSS 0.6%CVE-2026-85184CRITICAL@fastify/middie vulnerable to path-scoped middleware bypass via absolute-form request targetEPSS 0.5%CVE-2026-14198CRITICAL@fastify/middie vulnerable to authorization bypass via encoded slash in path parameter valuesEPSS 0.5%CVE-2026-14181HIGH@fastify/middie standalone engine vulnerable to Denial of Service via malformed percent-encoded pathsEPSS 0.5%CVE-2026-2880HIGH@fastify/middie has an improper path normalization vulnerabilityEPSS 0.5%CVE-2026-33804HIGH@fastify/middie vulnerable to middleware bypass via deprecated ignoreDuplicateSlashes optionEPSS 0.5%