@fastify/express vulnerabilities
2 published CVEs name @fastify/express among the affected products.
- 2Published CVEs2 of them scored
- 2Last 12 monthspublished in the last year
- 2Critical0 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-112362
@fastify/express vulnerable to path-scoped middleware bypass via absolute-form request targets
@fastify/express · @fastify/express
Critical9.1 - CVE-2026-6556
@fastify/express vulnerable to middleware bypass via non-string mount paths in prefixed plugins
@fastify/express · @fastify/express
Critical9.1