Denial of service in fastify

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2020-8192 · ADVISORY
• fastify/fastify commit 74c3157 · WEB
• hackerone.com/reports/903521 · WEB

Lỗ hổng khác của fastify

• CVE-2026-84428CAO 7.5fastify versions before 5.12.2 implement the case-insensitive nature of HTTP header names by lowercasing names in a route's header schema be…
• CVE-2026-84504CAO 8.1fastify versions before 5.12.2 treat the object resolved by a successful Ajv async validator as the value result protocol used by custom val…
• CVE-2026-84469CAO 7.5fastify versions before 5.12.2 decide whether to compile a request schema based on JavaScript truthiness, but JSON Schema Draft 7 defines th…
• CVE-2026-76169CAO 7.5fastify versions >= 4.0.0 and before 5.12.2 can route a malformed URL sent under one plugin prefix to the custom not-found handler of a diff…
• CVE-2026-18504TRUNG BÌNH 5.3fastify is a fast and low overhead web framework for Node.js. Versions of fastify before 5.12.1 are affected by a schema validation bypass w…