Product by HackerOne
Fastify\/middie
7 known vulnerabilities in Fastify\/middie (HackerOne), 0 of them actively exploited (CISA KEV).
Key figures
7
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
5
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2026-85184 | @fastify/middie vulnerable to path-scoped middleware bypass via absolute-form request target | 9.1 | |
| Critical | CVE-2026-14198 | @fastify/middie vulnerable to authorization bypass via encoded slash in path parameter values | 9.1 | |
| Critical | CVE-2026-6270 | @fastify/middie vulnerable to middleware authentication bypass in child plugin scopes | 9.1 | |
| High | CVE-2026-14181 | @fastify/middie: Uncaught Exception | 7.5 | |
| High | CVE-2026-22031 | Fastify Middie Middleware Path Bypass | 8.4 | |
| Critical | CVE-2026-2880 | @fastify/middie has an improper path normalization vulnerability | 9.1 | |
| Critical | CVE-2026-33804 | @fastify/middie vulnerable to middleware bypass via deprecated ignoreDuplicateSlashes option | 7.4 |
News
- @RISK®: The Consensus Security Vulnerability Alert: Vol. 26, Num. 26sans-atrisk-mail,