Denial of service in fastify

Description

References

• nvd.nist.gov/vuln/detail/CVE-2020-8192 · ADVISORY
• fastify/fastify commit 74c3157 · WEB
• hackerone.com/reports/903521 · WEB

fastify의 다른 취약점

• CVE-2026-84428높음 7.5fastify versions before 5.12.2 implement the case-insensitive nature of HTTP header names by lowercasing names in a route's header schema be…
• CVE-2026-84504높음 8.1fastify versions before 5.12.2 treat the object resolved by a successful Ajv async validator as the value result protocol used by custom val…
• CVE-2026-84469높음 7.5fastify versions before 5.12.2 decide whether to compile a request schema based on JavaScript truthiness, but JSON Schema Draft 7 defines th…
• CVE-2026-76169높음 7.5fastify versions >= 4.0.0 and before 5.12.2 can route a malformed URL sent under one plugin prefix to the custom not-found handler of a diff…
• CVE-2026-18504보통 5.3fastify is a fast and low overhead web framework for Node.js. Versions of fastify before 5.12.1 are affected by a schema validation bypass w…