Skip to content
Threat Feed
Subscribe

Product

@Fastify/Middie (9.0.0-9.3.5)

1 brief RSS
critical advisory

@fastify/middie: Security middleware bypass vulnerability (CVE-2026-112712)

A path-handling flaw in @fastify/middie versions 9.0.0 through 9.3.5 causes security middleware to be silently skipped, enabling unauthorized access to route handlers.

@fastify/middie web-application security-bypass cve
1t 1c