Menu

#Middie

1 post

Feed
1 of 1 post
0Read More

BREAKING: CVE-2026-85184 lets absolute-form requests skip Fastify middie auth

DEV Community: fastify·Michael Kantor·about 23 hours ago
#IgPP9ixl
#devtofastify#devto#dev#middie#fastify

Originally published at HOL An unauthenticated request can skip path-scoped auth middleware in Fastify apps that use @fastify/middie. Middie decides whether to run path-scoped auth by looking at the raw request target.…

15s