Denial of Service vulnerability with large JSON payloads in fastify

높음 7.5CVE-2018-3711 · GHSA-mq6c-fh97-4gwv · Published 07/06/2018 · updated 17/06/2026

요약

CVE-2018-3711은(는) fastify (fastify), fastify에 영향을 주는 높음 (CVSS 7.5) 취약점입니다.
향후 30일 내 악용 확률(EPSS): 1.8%, 전체 취약점의 78.1%보다 높음.
조치: 0.38.0 이상으로 업데이트하세요.

Package	Affected versions	Patched versions
fastify fastify	`< 0.38.0`	`0.38.0`
fastify npm	`< 0.38.0`	`0.38.0`

Description

Affected versions of fastify are vulnerable to a denial of service when processing a request with Content-Type set to application/json and a very large payload.

Recommendation

Update to version 0.38.0 or later.

NVD description

Fastify node module before 0.38.0 is vulnerable to a denial-of-service attack by sending a request with "Content-Type: application/json" and a very large payload.

References

nvd.nist.gov/vuln/detail/CVE-2018-3711 · ADVISORY
fastify/fastify#627 · WEB
fastify/fastify commit fabd2a0 · WEB
hackerone.com/reports/303632 · WEB
GitHub Advisory GHSA-mq6c-fh97-4gwv · ADVISORY
npmjs.com/advisories/564 · WEB

fastify의 다른 취약점

모두 보기 →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

fastify

< 0.38.0

0.38.0

fastify

npm

< 0.38.0

0.38.0

Description

Affected versions of fastify are vulnerable to a denial of service when processing a request with Content-Type set to application/json and a very large payload.

Recommendation

Update to version 0.38.0 or later.

NVD description

Fastify node module before 0.38.0 is vulnerable to a denial-of-service attack by sending a request with "Content-Type: application/json" and a very large payload.

fastify의 다른 취약점

모두 보기 →