@fastify/express

@fastify/express has a middleware authentication bypass via URL normalization gaps (duplicate slashes and semicolons)

@fastify/express vulnerable to Improper Handling of URL Encoding (Hex Encoding)

@fastify/express's middleware path doubling causes authentication bypass in child plugin scopes