CPE
An authentication and authorization bypass vulnerability in @fastify/express versions 4.0.5 through 4.0.8 occurs when the non-default ignoreDuplicateSlashes option is enabled, allowing attackers to access restricted handlers by misaligning path normalization between Fastify and Express middleware.