CVE-2026-112362 - @fastify/express vulnerable to path-scoped middleware bypass via absolute-form request targets
CVE ID :CVE-2026-112362 Published : Oct. 27, 2026, 11:27 a.m. | 55 minutes ago Description :@fastify/express is a Fastify plugin that runs Express middleware inside Fastify. In versions 4.0.5 through 4.0.8, when Fastify runs with the non-default ignoreDuplicateSlashes option enabled, the...