Wed, Oct 21 Vulnerabilities and patches
Flaw in Fastify’s middie engine lets requests skip authentication middleware
Versions 9.0.0 through 9.3.5 can silently skip path-scoped middleware such as authentication, most often when a scope prefix ends in a slash, and 9.3.6 fixes it.