Lucene search
+L

1 matches found

Cvelist
Cvelist
added 2026/04/15 12:14 a.m.50 views

CVE-2026-33806 fastify vulnerable to Body Schema Validation Bypass via Leading Space in Content-Type Header

Impact: Fastify applications using schema.body.content for per-content-type body validation can have validation bypassed entirely by prepending a space to the Content-Type header. The body is still parsed correctly but schema validation is skipped. This is a regression introduced in fastify = 5.3...

7.5CVSS0.00408EPSS
SaveExploits0References2
Rows per page
Query Builder