{"api_version":"v1","generated_at":"2026-10-08T16:40:00+00:00","product":{"cve_count":6,"evidence_gap_note":"Official registry publication history is linked, but a publisher support or retirement boundary has not been established.","id":"security:cve-fastify-middie-fastify-middie-deee967c69be","lifecycle_state":"evidence_gap","linked_lifecycle_url":"https://lifecycle.blacktree.nl/libraries/npm/%40fastify/middie","name":"@fastify/middie","next_cursor":null,"observations":[{"affected":"@fastify/middie: 9.1.0 < 9.3.4","affected_versions_present":true,"cve_id":"CVE-2026-85184","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-85184","fixed":"@fastify/middie: 9.3.4","last_modified":"2026-09-04T19:36:20.968Z","patch_url":"https://github.com/fastify/middie/security/advisories/GHSA-hx87-8wv7-pjv8","primary_source":"","published":"2026-09-04T09:15:51.216Z"},{"affected":"9.1.0 < 9.3.3","affected_versions_present":true,"cve_id":"CVE-2026-14181","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-14181","fixed":"9.3.3","last_modified":"2026-07-01T12:05:42.403Z","patch_url":"https://github.com/fastify/middie/security/advisories/GHSA-qcc9-jh8q-47vh","primary_source":"","published":"2026-07-01T11:42:49.874Z"},{"affected":"9.1.0 < 9.3.3","affected_versions_present":true,"cve_id":"CVE-2026-14198","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-14198","fixed":"9.3.3","last_modified":"2026-07-01T12:10:29.571Z","patch_url":"https://github.com/fastify/middie/security/advisories/GHSA-2v46-jxjm-7q3v","primary_source":"","published":"2026-07-01T11:29:20.435Z"},{"affected":"< 9.3.2","affected_versions_present":true,"cve_id":"CVE-2026-33804","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-33804","fixed":"9.3.2","last_modified":"2026-04-16T14:41:48.659Z","patch_url":"https://github.com/fastify/middie/security/advisories/GHSA-v9ww-2j6r-98q6","primary_source":"","published":"2026-04-16T13:56:56.176Z"},{"affected":"< 9.3.2","affected_versions_present":true,"cve_id":"CVE-2026-6270","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-6270","fixed":"9.3.2","last_modified":"2026-04-16T14:24:26.764Z","patch_url":"https://github.com/fastify/fastify-express/security/advisories/GHSA-hrwm-hgmj-7p9c","primary_source":"","published":"2026-04-16T13:44:46.322Z"},{"affected":"0.0.0 < 9.2.0","affected_versions_present":true,"cve_id":"CVE-2026-2880","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-2880","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-02-27T18:56:02.979Z","patch_url":"https://github.com/fastify/middie/security/advisories/GHSA-8p85-9qpw-fwgw","primary_source":"","published":"2026-02-27T18:25:37.428Z"}],"source_generated_at":"2026-10-08T06:18:52.353Z","vendor":"@fastify/middie"}}