{"action":"Upgrade @fastify/middie to 9.1.0 or later.","affected":[{"fixed":"9.1.0","introduced":"0"}],"component":"@fastify/middie","cve_ids":["CVE-2026-22031"],"ecosystem":"npm","epss":0.00532,"exploited":false,"fixed_versions":["9.1.0"],"ghsa_id":"GHSA-cxrg-g7r8-w69p","id":"tcs_01M5KFKZ7J5PA79V4DJE4G7HJX","modified_at":"2026-07-08T08:14:42.833760293Z","published_at":"2026-01-20T16:34:50Z","references":["https://osv.dev/vulnerability/GHSA-cxrg-g7r8-w69p","https://github.com/fastify/middie/security/advisories/GHSA-cxrg-g7r8-w69p","https://nvd.nist.gov/vuln/detail/CVE-2026-22031","https://github.com/fastify/middie/pull/245","https://github.com/fastify/middie/commit/d44cd56eb724490babf7b452fdbbdd37ea2effba","https://github.com/fastify/middie","https://github.com/fastify/middie/releases/tag/v9.1.0"],"severity":{"label":"high","score":8.4},"sources":[{"source":"osv","source_id":"GHSA-cxrg-g7r8-w69p","url":"https://osv.dev/vulnerability/GHSA-cxrg-g7r8-w69p"}],"summary":"Fastify Middie Middleware Path Bypass"}