CVE-2026-112712 – @fastify/middie vulnerable to path-scoped middleware bypass via scope prefix mismatch
CVE ID :CVE-2026-112712 Published : Oct. 20, 2026, 8:43 p.m. | 45 minutes ago Description :@fastify/middie is the Express-style middleware engine for Fastify. In versions from 9.0.0 through 9.3.5, the use() function joined a path-scoped middleware’s mount path to the plugin…
