Lucene search
+L

1554 matches found

RedhatCVE
RedhatCVE
added 2026/02/28 7:45 p.m.10 views

CVE-2026-2880

A vulnerability in @fastify/middie versions 9.2.0 can result in authentication/authorization bypass when using path-scoped middleware for example, app.use'/secret', auth. When Fastify router normalization options are enabled such as ignoreDuplicateSlashes, useSemicolonDelimiter, and related...

9.1CVSS5.9AI score0.0039EPSS
SaveExploits0References1
Github Security Blog
Github Security Blog
added 2026/02/28 2:47 a.m.16 views

@fastify/middie has Improper Path Normalization when Using Path-Scoped Middleware

Summary A path normalization inconsistency in @fastify/middie can result in authentication/authorization bypass when using path-scoped middleware for example, app.use'/secret', auth. When Fastify router normalization options are enabled such as ignoreDuplicateSlashes, useSemicolonDelimiter, and...

9.1CVSS6AI score0.0039EPSS
SaveExploits0References7Affected Software1
OSV
OSV
added 2026/02/28 2:47 a.m.8 views

GHSA-8P85-9QPW-FWGW @fastify/middie has Improper Path Normalization when Using Path-Scoped Middleware

Summary A path normalization inconsistency in @fastify/middie can result in authentication/authorization bypass when using path-scoped middleware for example, app.use'/secret', auth. When Fastify router normalization options are enabled such as ignoreDuplicateSlashes, useSemicolonDelimiter, and...

8.2CVSS6AI score0.0039EPSS
SaveExploits0References7
EUVD
EUVD
added 2026/02/28 2:47 a.m.10 views

EUVD-2026-9049

@fastify/middie has Improper Path Normalization when Using Path-Scoped Middleware...

8.2CVSS5.9AI score0.0039EPSS
SaveExploits0References6
Snyk
Snyk
added 2026/02/27 9:24 p.m.5 views

Interpretation Conflict

Overview @fastify/middie is a Middleware engine for Fastify Affected versions of this package are vulnerable to Interpretation Conflict via the middleware matching engine when router options like ignoreDuplicateSlashes, useSemicolonDelimiter, or other trailing-slash normalization are enabled. An...

9.1CVSS6AI score0.0039EPSS
SaveExploits0References2
NVD
NVD
added 2026/02/27 7:16 p.m.11 views

CVE-2026-2880

A vulnerability in @fastify/middie versions 9.2.0 can result in authentication/authorization bypass when using path-scoped middleware for example, app.use'/secret', auth. When Fastify router normalization options are enabled such as ignoreDuplicateSlashes, useSemicolonDelimiter, and related...

9.1CVSS0.0039EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/02/27 6:31 p.m.13 views

EUVD-2026-9034

A NestJS application using @nestjs/platform-fastify can allow bypass of authentication/authorization middleware when Fastify path-normalization options are enabled. This issue affects nest.Js: 11.1.13...

8.2CVSS5.9AI score0.00666EPSS
SaveExploits1References4
OSV
OSV
added 2026/02/27 6:31 p.m.8 views

GHSA-7Q64-3RG2-H9PF Duplicate Advisory: Nest has a Fastify URL Encoding Middleware Bypass

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-r4wm-x892-vjmx. This link is maintained to preserve external references. Original Description A NestJS application using @nestjs/platform-fastify can allow bypass of authentication/authorization middleware when...

8.2CVSS5.8AI score
SaveExploits0References4
Github Security Blog
Github Security Blog
added 2026/02/27 6:31 p.m.14 views

Duplicate Advisory: Nest has a Fastify URL Encoding Middleware Bypass

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-r4wm-x892-vjmx. This link is maintained to preserve external references. Original Description A NestJS application using @nestjs/platform-fastify can allow bypass of authentication/authorization middleware when...

9.8CVSS5.8AI score0.00666EPSS
SaveExploits1References5Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/02/27 6:25 p.m.5 views

CVE-2026-2880

A vulnerability in @fastify/middie versions 9.2.0 can result in authentication/authorization bypass when using path-scoped middleware for example, app.use'/secret', auth. When Fastify router normalization options are enabled such as ignoreDuplicateSlashes, useSemicolonDelimiter, and related...

9.1CVSS5.9AI score0.0039EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2026/02/27 6:25 p.m.3 views

CVE-2026-2880 @fastify/middie has an improper path normalization vulnerability

A vulnerability in @fastify/middie versions 9.2.0 can result in authentication/authorization bypass when using path-scoped middleware for example, app.use'/secret', auth. When Fastify router normalization options are enabled such as ignoreDuplicateSlashes, useSemicolonDelimiter, and related...

8.2CVSS5.9AI score0.0039EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/02/27 6:25 p.m.29 views

CVE-2026-2880 @fastify/middie has an improper path normalization vulnerability

A vulnerability in @fastify/middie versions 9.2.0 can result in authentication/authorization bypass when using path-scoped middleware for example, app.use'/secret', auth. When Fastify router normalization options are enabled such as ignoreDuplicateSlashes, useSemicolonDelimiter, and related...

8.2CVSS0.0039EPSS
SaveExploits0References1
CVE
CVE
added 2026/02/27 6:25 p.m.37 views

CVE-2026-2880

Summary: CVE-2026-2880 concerns a path normalization issue in @fastify/middie (versions

9.1CVSS5.9AI score0.0039EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2026/02/27 6:25 p.m.8 views

CVE-2026-2880 @fastify/middie has an improper path normalization vulnerability

A vulnerability in @fastify/middie versions 9.2.0 can result in authentication/authorization bypass when using path-scoped middleware for example, app.use'/secret', auth. When Fastify router normalization options are enabled such as ignoreDuplicateSlashes, useSemicolonDelimiter, and related...

8.2CVSS5.9AI score
SaveExploits0References3
Snyk
Snyk
added 2026/02/27 6:22 p.m.2 views

Incorrect Authorization

Overview @nestjs/platform-fastify is a Nest - modern, fast, powerful node.js web framework @platform-fastify Affected versions of this package are vulnerable to Incorrect Authorization when Fastify path-normalization options e.g., ignoreTrailingSlash, ignoreDuplicateSlashes, useSemicolonDelimiter...

8.2CVSS6AI score0.00666EPSS
SaveExploits1References2
Snyk
Snyk
added 2026/02/27 6:22 p.m.3 views

Incorrect Authorization

Overview @nestjs/core is a Nest - modern, fast, powerful node.js web framework @core Affected versions of this package are vulnerable to Incorrect Authorization when Fastify path-normalization options e.g., ignoreTrailingSlash, ignoreDuplicateSlashes, useSemicolonDelimiter are enabled. An attacke...

8.2CVSS6AI score0.00666EPSS
SaveExploits1References2
NVD
NVD
added 2026/02/27 5:16 p.m.15 views

CVE-2026-2293

A NestJS application using @nestjs/platform-fastify can allow bypass of authentication/authorization middleware when Fastify path-normalization options are enabled. This issue affects nest.Js: 11.1.13...

9.8CVSS0.00666EPSS
SaveExploits1References6
ATTACKERKB
ATTACKERKB
added 2026/02/27 4:15 p.m.5 views

CVE-2026-2293

A NestJS application using @nestjs/platform-fastify can allow bypass of authentication/authorization middleware when Fastify path-normalization options are enabled. This issue affects nest.Js: 11.1.13...

8.2CVSS5.9AI score0.00666EPSS
SaveExploits1References4Affected Software1
OSV
OSV
added 2026/02/27 4:15 p.m.6 views

CVE-2026-2293 NestJS 11.1.13 - Lack of data validation allowing authentication/authorization bypass

A NestJS application using @nestjs/platform-fastify can allow bypass of authentication/authorization middleware when Fastify path-normalization options are enabled. This issue affects nest.Js: 11.1.13...

8.2CVSS6AI score
SaveExploits0References9
Vulnrichment
Vulnrichment
added 2026/02/27 4:15 p.m.7 views

CVE-2026-2293 NestJS 11.1.13 - Lack of data validation allowing authentication/authorization bypass

A NestJS application using @nestjs/platform-fastify can allow bypass of authentication/authorization middleware when Fastify path-normalization options are enabled. This issue affects nest.Js: 11.1.13...

8.2CVSS5.9AI score0.00666EPSS
SaveExploits1References3
Rows per page
Query Builder