Lucene search

K
osvGoogleOSV:GHSA-XW5P-HW6R-2J98
HistoryAug 05, 2020 - 2:53 p.m.

Denial of service in fastify

2020-08-0514:53:22
Google
osv.dev
7

0.001 Low

EPSS

Percentile

34.3%

A denial of service vulnerability exists in Fastify v2.14.1 and v3.0.0-rc.4 that allows a malicious user to trigger resource exhaustion (when the allErrors option is used) with specially crafted schemas.

CPENameOperatorVersion
fastifylt2.15.1

0.001 Low

EPSS

Percentile

34.3%