Vulnerability	Vulnerable Version
C Interpretation Conflict @fastify/middie is a Middleware engine for Fastify Affected versions of this package are vulnerable to Interpretation Conflict via incorrect prefix-path joining in the `use` function, where middleware mount paths are concatenated with the Fastify route prefix using a logic that diverges from Fastify's own route joining rules. An attacker can send requests to paths that should be protected by middleware but are not matched due to the malformed joined path, effectively bypassing middleware-enforced controls such as authentication or authorization. How to fix Interpretation Conflict? Upgrade `@fastify/middie` to version 9.3.6 or higher.	>=9.0.0 <9.3.6

Interpretation Conflict

@fastify/middie is a Middleware engine for Fastify

Affected versions of this package are vulnerable to Interpretation Conflict via incorrect prefix-path joining in the use function, where middleware mount paths are concatenated with the Fastify route prefix using a logic that diverges from Fastify's own route joining rules. An attacker can send requests to paths that should be protected by middleware but are not matched due to the malformed joined path, effectively bypassing middleware-enforced controls such as authentication or authorization.

How to fix Interpretation Conflict?

Upgrade @fastify/middie to version 9.3.6 or higher.

>=9.0.0 <9.3.6

Go back to all versions of this package