Fastify

Flaw in Fastify’s middie engine lets requests skip authentication middleware

Versions 9.0.0 through 9.3.5 can silently skip path-scoped middleware such as authentication, most often when a scope prefix ends in a slash, and 9.3.6 fixes it.