Lucene search
+L

1556 matches found

CNNVD
CNNVD
added 2026/03/02 12:0 a.m.11 views

Google Android 安全漏洞

Google Android is an open-source operating system based on Linux, developed by Google Inc. There are security vulnerabilities in Google Android, which stem from incorrect Unicode normalization in multiple locations. These vulnerabilities may bypass the file path filters designed to prevent access...

7.8CVSS5.8AI score0.0011EPSS
SaveExploits0References2
OSV
OSV
added 2026/03/01 12:0 a.m.11 views

ASB-A-377888957

In multiple locations, there is a possible bypass of a file path filter designed to prevent access to sensitive directories due to incorrect unicode normalization. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for...

7.8CVSS6.1AI score0.0011EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2026/02/28 7:45 p.m.10 views

CVE-2026-2880

A vulnerability in @fastify/middie versions 9.2.0 can result in authentication/authorization bypass when using path-scoped middleware for example, app.use'/secret', auth. When Fastify router normalization options are enabled such as ignoreDuplicateSlashes, useSemicolonDelimiter, and related...

9.1CVSS5.9AI score0.0039EPSS
SaveExploits0References1
Github Security Blog
Github Security Blog
added 2026/02/28 2:47 a.m.16 views

@fastify/middie has Improper Path Normalization when Using Path-Scoped Middleware

Summary A path normalization inconsistency in @fastify/middie can result in authentication/authorization bypass when using path-scoped middleware for example, app.use'/secret', auth. When Fastify router normalization options are enabled such as ignoreDuplicateSlashes, useSemicolonDelimiter, and...

9.1CVSS6AI score0.0039EPSS
SaveExploits0References7Affected Software1
OSV
OSV
added 2026/02/28 2:47 a.m.8 views

GHSA-8P85-9QPW-FWGW @fastify/middie has Improper Path Normalization when Using Path-Scoped Middleware

Summary A path normalization inconsistency in @fastify/middie can result in authentication/authorization bypass when using path-scoped middleware for example, app.use'/secret', auth. When Fastify router normalization options are enabled such as ignoreDuplicateSlashes, useSemicolonDelimiter, and...

8.2CVSS6AI score0.0039EPSS
SaveExploits0References7
EUVD
EUVD
added 2026/02/28 2:47 a.m.10 views

EUVD-2026-9049

@fastify/middie has Improper Path Normalization when Using Path-Scoped Middleware...

8.2CVSS5.9AI score0.0039EPSS
SaveExploits0References6
Snyk
Snyk
added 2026/02/27 9:24 p.m.5 views

Interpretation Conflict

Overview @fastify/middie is a Middleware engine for Fastify Affected versions of this package are vulnerable to Interpretation Conflict via the middleware matching engine when router options like ignoreDuplicateSlashes, useSemicolonDelimiter, or other trailing-slash normalization are enabled. An...

9.1CVSS6AI score0.0039EPSS
SaveExploits0References2
NVD
NVD
added 2026/02/27 7:16 p.m.11 views

CVE-2026-2880

A vulnerability in @fastify/middie versions 9.2.0 can result in authentication/authorization bypass when using path-scoped middleware for example, app.use'/secret', auth. When Fastify router normalization options are enabled such as ignoreDuplicateSlashes, useSemicolonDelimiter, and related...

9.1CVSS0.0039EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/02/27 6:31 p.m.13 views

EUVD-2026-9034

A NestJS application using @nestjs/platform-fastify can allow bypass of authentication/authorization middleware when Fastify path-normalization options are enabled. This issue affects nest.Js: 11.1.13...

8.2CVSS5.9AI score0.00666EPSS
SaveExploits1References4
OSV
OSV
added 2026/02/27 6:31 p.m.8 views

GHSA-7Q64-3RG2-H9PF Duplicate Advisory: Nest has a Fastify URL Encoding Middleware Bypass

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-r4wm-x892-vjmx. This link is maintained to preserve external references. Original Description A NestJS application using @nestjs/platform-fastify can allow bypass of authentication/authorization middleware when...

8.2CVSS5.8AI score
SaveExploits0References4
Github Security Blog
Github Security Blog
added 2026/02/27 6:31 p.m.14 views

Duplicate Advisory: Nest has a Fastify URL Encoding Middleware Bypass

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-r4wm-x892-vjmx. This link is maintained to preserve external references. Original Description A NestJS application using @nestjs/platform-fastify can allow bypass of authentication/authorization middleware when...

9.8CVSS5.8AI score0.00666EPSS
SaveExploits1References5Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/02/27 6:25 p.m.5 views

CVE-2026-2880

A vulnerability in @fastify/middie versions 9.2.0 can result in authentication/authorization bypass when using path-scoped middleware for example, app.use'/secret', auth. When Fastify router normalization options are enabled such as ignoreDuplicateSlashes, useSemicolonDelimiter, and related...

9.1CVSS5.9AI score0.0039EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2026/02/27 6:25 p.m.3 views

CVE-2026-2880 @fastify/middie has an improper path normalization vulnerability

A vulnerability in @fastify/middie versions 9.2.0 can result in authentication/authorization bypass when using path-scoped middleware for example, app.use'/secret', auth. When Fastify router normalization options are enabled such as ignoreDuplicateSlashes, useSemicolonDelimiter, and related...

8.2CVSS5.9AI score0.0039EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/02/27 6:25 p.m.29 views

CVE-2026-2880 @fastify/middie has an improper path normalization vulnerability

A vulnerability in @fastify/middie versions 9.2.0 can result in authentication/authorization bypass when using path-scoped middleware for example, app.use'/secret', auth. When Fastify router normalization options are enabled such as ignoreDuplicateSlashes, useSemicolonDelimiter, and related...

8.2CVSS0.0039EPSS
SaveExploits0References1
CVE
CVE
added 2026/02/27 6:25 p.m.38 views

CVE-2026-2880

Summary: CVE-2026-2880 concerns a path normalization issue in @fastify/middie (versions

9.1CVSS5.9AI score0.0039EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2026/02/27 6:25 p.m.8 views

CVE-2026-2880 @fastify/middie has an improper path normalization vulnerability

A vulnerability in @fastify/middie versions 9.2.0 can result in authentication/authorization bypass when using path-scoped middleware for example, app.use'/secret', auth. When Fastify router normalization options are enabled such as ignoreDuplicateSlashes, useSemicolonDelimiter, and related...

8.2CVSS5.9AI score
SaveExploits0References3
Snyk
Snyk
added 2026/02/27 6:22 p.m.2 views

Incorrect Authorization

Overview @nestjs/platform-fastify is a Nest - modern, fast, powerful node.js web framework @platform-fastify Affected versions of this package are vulnerable to Incorrect Authorization when Fastify path-normalization options e.g., ignoreTrailingSlash, ignoreDuplicateSlashes, useSemicolonDelimiter...

8.2CVSS6AI score0.00666EPSS
SaveExploits1References2
Snyk
Snyk
added 2026/02/27 6:22 p.m.3 views

Incorrect Authorization

Overview @nestjs/core is a Nest - modern, fast, powerful node.js web framework @core Affected versions of this package are vulnerable to Incorrect Authorization when Fastify path-normalization options e.g., ignoreTrailingSlash, ignoreDuplicateSlashes, useSemicolonDelimiter are enabled. An attacke...

8.2CVSS6AI score0.00666EPSS
SaveExploits1References2
NVD
NVD
added 2026/02/27 5:16 p.m.15 views

CVE-2026-2293

A NestJS application using @nestjs/platform-fastify can allow bypass of authentication/authorization middleware when Fastify path-normalization options are enabled. This issue affects nest.Js: 11.1.13...

9.8CVSS0.00666EPSS
SaveExploits1References6
ATTACKERKB
ATTACKERKB
added 2026/02/27 4:15 p.m.5 views

CVE-2026-2293

A NestJS application using @nestjs/platform-fastify can allow bypass of authentication/authorization middleware when Fastify path-normalization options are enabled. This issue affects nest.Js: 11.1.13...

8.2CVSS5.9AI score0.00666EPSS
SaveExploits1References4Affected Software1
Rows per page
Query Builder