Denial of Service vulnerability with large JSON payloads in fastify

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2018-3711 · ADVISORY
• fastify/fastify#627 · WEB
• fastify/fastify commit fabd2a0 · WEB
• hackerone.com/reports/303632 · WEB
• GitHub Advisory GHSA-mq6c-fh97-4gwv · ADVISORY
• npmjs.com/advisories/564 · WEB

Lỗ hổng khác của fastify

• CVE-2026-84428CAO 7.5fastify versions before 5.12.2 implement the case-insensitive nature of HTTP header names by lowercasing names in a route's header schema be…
• CVE-2026-84504CAO 8.1fastify versions before 5.12.2 treat the object resolved by a successful Ajv async validator as the value result protocol used by custom val…
• CVE-2026-84469CAO 7.5fastify versions before 5.12.2 decide whether to compile a request schema based on JavaScript truthiness, but JSON Schema Draft 7 defines th…
• CVE-2026-76169CAO 7.5fastify versions >= 4.0.0 and before 5.12.2 can route a malformed URL sent under one plugin prefix to the custom not-found handler of a diff…
• CVE-2026-18504TRUNG BÌNH 5.3fastify is a fast and low overhead web framework for Node.js. Versions of fastify before 5.12.1 are affected by a schema validation bypass w…