Skip to content

h3: Missing Path Segment Boundary Check in `mount()` Causes Middleware Execution on Unrelated Prefix-Matching Routes

Low severity GitHub Reviewed Published Mar 20, 2026 in h3js/h3 • Updated Mar 20, 2026

No open alerts for this advisory

Give feedback on Dependabot alerts