Skip to content
OpenAdvisories

Package · npm

@fastify/middie

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.1
    CVE-2026-6270

    @fastify/middie vulnerable to middleware authentication bypass in child plugin scopes

    @fastify/middie versions 9.3.1 and earlier do not register inherited middleware directly on child plugin engine instances. When a Fastify application registers authentication middleware in a parent scope and then registers child plugins with @fastify/middie, …

    @fastify/middie @fastify/middie @fastify/middie npm