This write-up has moved to the Brickell Technologies blog:

CVE-2026-85184: @fastify/middie Auth Bypass With Absolute-Form Requests