Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2026/04/16 10:28 p.m.10 views

@fastify/middie vulnerable to middleware bypass via deprecated ignoreDuplicateSlashes option

Impact @fastify/middie v9.3.1 and earlier does not read the deprecated but still functional top-level ignoreDuplicateSlashes option, only reading from routerOptions. This creates a normalization gap: Fastify's router normalizes duplicate slashes but middie does not, allowing middleware bypass via...

9.1CVSS5.8AI score0.00278EPSS
SaveExploits0References4Affected Software1
Rows per page
Query Builder