CVE-2026-2880

creationtimestamp| type| source ---|---|--- 2026-02-27 18:36:39+00:00| seen| https://bsky.app/profile/ulisesgascon.com/post/3mfue4bp2322b 2026-02-27 21:47:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mfuosfvtuc2e 2026-02-28 06:40:11+00:00| seen|...

CVE-2026-2880

A vulnerability in @fastify/middie versions 9.2.0 can result in authentication/authorization bypass when using path-scoped middleware for example, app.use'/secret', auth. When Fastify router normalization options are enabled such as ignoreDuplicateSlashes, useSemicolonDelimiter, and related...