Browse all 2 CVE security advisories affecting @fastify/express. AI-powered Chinese analysis, POCs, and references for each vulnerability.
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-112362 | @fastify/express vulnerable to path-scoped middleware bypass via absolute-form request targets — @fastify/express CWE-436 | 9.1 | Critical | 2026-10-27 |
| CVE-2026-6556 | @fastify/express vulnerable to middleware bypass via non-string mount paths in prefixed plugins — @fastify/express CWE-285 | 9.1 | Critical | 2026-06-30 |
This page lists every published CVE security advisory associated with @fastify/express. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.