fastify @fastify/express vulnerabilities
2 published CVEs name fastify @fastify/express among the affected products.
- 2Published CVEs2 of them scored
- 2Last 12 monthspublished in the last year
- 2Critical0 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-33807
@fastify/express vulnerable to middleware path doubling causing authentication bypass in child plugin scopes
fastify · @fastify/express
Critical9.1 - CVE-2026-33808
@fastify/express vulnerable to middleware authentication bypass via URL normalization gaps (duplicate slashes and semicolons)
fastify · @fastify/express
Critical9.1