RSS   Podatności dla 'Fastify'   RSS

2020-07-30
 
CVE-2020-8192

CWE-400
 
 
A denial of service vulnerability exists in Fastify v2.14.1 and v3.0.0-rc.4 that allows a malicious user to trigger resource exhaustion (when the allErrors option is used) with specially crafted schemas.

 
2018-06-06
 
CVE-2018-3711

CWE-770
 
 
Fastify node module before 0.38.0 is vulnerable to a denial-of-service attack by sending a request with "Content-Type: application/json" and a very large payload.

 

 >>> Vendor: Fastify 4 Produkty
Fastify
Fastify-multipart
Fastify-csrf
Fastify-static

Copyright 2024, cxsecurity.com

 

Back to Top