cbcvebase.

Fastify Express Fastify Express vulnerabilities

1 known vulnerability affecting fastify/express_fastify_express.

Total CVEs
1
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL1

Vulnerabilities

Page 1 of 1
CVE-2026-6556P2CRITICALCVSS 9.1fixed in 4.0.72026-06-30
CVE-2026-6556 [CRITICAL] CWE-285 CVE-2026-6556: @fastify/express versions 4.0.6 and earlier only rewrite the plugin prefix for middleware mount path @fastify/express versions 4.0.6 and earlier only rewrite the plugin prefix for middleware mount paths when the path argument is a string. Non-string mount paths (arrays of paths and regular expressions) are left unprefixed inside prefixed plugin scopes, so middleware registered with those forms does not match the actual prefixed request path. Applic
nvd
Fastify Express Fastify Express vulnerabilities | cvebase