Denial of service in fastify
Moderate severity
GitHub Reviewed
Published
Aug 5, 2020
to the GitHub Advisory Database
•
Updated Jan 9, 2023
Description
Reviewed
Aug 3, 2020
Published to the GitHub Advisory Database
Aug 5, 2020
Last updated
Jan 9, 2023
A denial of service vulnerability exists in Fastify v2.14.1 and v3.0.0-rc.4 that allows a malicious user to trigger resource exhaustion (when the allErrors option is used) with specially crafted schemas.
References