Lucene search
+L

1 matches found

osv_ghsa
osv_ghsa
•added 2026/04/16 1:03 a.m.•29 views

GHSA-HRWM-HGMJ-7P9C @fastify/express's middleware path doubling causes authentication bypass in child plugin scopes

Summary @fastify/express v4.0.4 contains a path handling bug in the onRegister function that causes middleware paths to be doubled when inherited by child plugins. This results in complete bypass of Express middleware security controls for all routes defined within child plugin scopes that share ...

9.1CVSS8.1AI score0.00608EPSS
SaveExploits2References4
Rows per page
Query Builder