CVE-2026-33804: Fastify Middie Normalization Options Missing Config Fallbackcve-2026-33804-fastify-middie-normalization-options-missing-config-fallback
A Fastify path-normalization option (ignoreDuplicateSlashes, ignoreTrailingSlash, or useSemicolonDelimiter) is read from a nested sub-configuration object without a nullish-coalescing (??) fallback to the parent/top-level configuration. In @fastify/middie, this causes the middleware path-matching engine to apply different URL normalization than Fastify's rou
