CVE-2026-120216

A flaw was found in Fastify. An unauthenticated remote attacker can cause a Denial of Service DoS by sending a request to a streaming endpoint when a custom handler timeout is configured. If a streaming response remains open past the configured timeout after response headers have already been sen...