@fastify/express vulnerabilities

2 published CVEs name @fastify/express among the affected products.

All 2 in the list Atom feed of new CVEs

Published CVEs: 2
Last 12 months: 2
Critical: 2
Known exploited: 0

Critical 2High 0Medium 0Low 0Not scored 0

Newest CVEs

CVE-2026-112362
@fastify/express vulnerable to path-scoped middleware bypass via absolute-form request targets
@fastify/express · @fastify/express
Critical9.1
CVE-2026-6556
@fastify/express vulnerable to middleware bypass via non-string mount paths in prefixed plugins
@fastify/express · @fastify/express
Critical9.1

Products with the most CVEs

@fastify/express2

Most common weaknesses