Vulnerabilities of fastify @fastify/express
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-33807 | @fastify/express v4.0.4 and earlier contains a path handling bug in the onRegister function that causes middleware paths… | 9.1 Critical | Apr 15, 2026 |
| CVE-2026-33808 | Impact@fastify/express v4.0.4 and earlier fails to normalize URLs before passing them to Express middleware when Fastify… | 9.1 Critical | Apr 15, 2026 |