vulnerability in vite-plugin-node project #136
Description
While working on vite-plugin-node project, I identified CVE-2026-2880 affecting the @fastify/middie package. The vulnerability is caused by improper path normalization when Fastify router normalization options are enabled. In certain configurations, a crafted request path can bypass path-scoped middleware checks while still reaching protected route handlers.