Home
Home
Trends
Trends
Vulnerabilities
Vulnerabilities
News
News
Researchers
Researchers
Why dbugs?
Why dbugs?
Settings

Zachariah-Mithani

#31591of 60,399
9.1Total CVSS
Vulnerabilities · 1
PT-2026-118649
2026-10-20
9.1
CVE-2026-112712
Npm
@Fastify/Middie
The `use()` function joins a path-scoped middleware mount path to the plugin scope prefix in a manner that may diverge from the path served by the Fastify router. This occurs primarily when the scope prefix ends in a slash, when array mount paths are used, or when mount paths lack a leading slash. Such discrepancies cause the middleware to be silently skipped while the route handler continues to execute, potentially allowing a single unauthenticated request to bypass critical path-scoped middleware such as authentication, authorization, or rate limiting.