Lucene search
+L

2 matches found

Github Security Blog
Github Security Blog
added 2026/04/16 10:29 p.m.11 views

@fastify/middie vulnerable to middleware authentication bypass in child plugin scopes

Impact @fastify/middie v9.3.1 and earlier incorrectly re-prefixes middleware paths when propagating them to child plugin scopes. When a child plugin is registered with a prefix that overlaps with a parent-scoped middleware path, the middleware path is modified during inheritance and silently fail...

9.1CVSS5.8AI score0.00498EPSS
SaveExploits1References5Affected Software1
OSV
OSV
added 2026/04/16 10:29 p.m.6 views

GHSA-72C6-FX6Q-FR5W @fastify/middie vulnerable to middleware authentication bypass in child plugin scopes

Impact @fastify/middie v9.3.1 and earlier incorrectly re-prefixes middleware paths when propagating them to child plugin scopes. When a child plugin is registered with a prefix that overlaps with a parent-scoped middleware path, the middleware path is modified during inheritance and silently fail...

9.1CVSS5.8AI score0.00498EPSS
SaveExploits1References5
Rows per page
Query Builder