CVE-2020-8192

A denial of service vulnerability exists in Fastify v2.14.1 and v3.0.0-rc.4 that allows a malicious user to trigger resource exhaustion when the allErrors option is used with specially crafted schemas...

@brunnerlivio/terminus (>=6.3.1, <=6.5.2), @eik/core (>=1.0.0-alpha.9, <=1.0.0-alpha.14) +54 more potentially affected by CVE-2020-8192 via fastify (>=2.0.0, <=2.15.0)

fastify NPM version =2.0.0, =6.3.1, =1.0.0-alpha.9, =1.0.0-alpha.1, =0.0.1, =2.0.0-alpha.1, =0.0.1, =0.0.1, =0.1.12, =0.0.10, =0.2.0, =1.7.0, =2.1.0, =6.0.1, =6.2.0-rc.0, =6.5.6 and more Source cves: CVE-2020-8192 Source advisory: OSV:GHSA-XW5P-HW6R-2J98...

CVE-2020-8192

CVE-2020-8192 affects Fastify versions 2.14.1 and 3.0.0-rc.4. The vulnerability is a denial-of-service via resource exhaustion when the AJV-based validation uses the allErrors option and receives specially crafted schemas. The impact described in multiple connected records is that a malicious use...