8 matches found
CVE-2026-120216
fastify is a web framework for Node.js. In versions 5.8.0 through 5.12.7, when the server is configured with a nonzero handlerTimeout and a route returns a streaming response, a request whose stream has already sent its headers but stays open past the timeout crashes the server. When the timeout...
CVE-2026-120216 fastify vulnerable to Denial of Service via uncaught exception on handlerTimeout with streaming responses
fastify is a web framework for Node.js. In versions 5.8.0 through 5.12.7, when the server is configured with a nonzero handlerTimeout and a route returns a streaming response, a request whose stream has already sent its headers but stays open past the timeout crashes the server. When the timeout...
CVE-2026-120216 fastify vulnerable to Denial of Service via uncaught exception on handlerTimeout with streaming responses
fastify is a web framework for Node.js. In versions 5.8.0 through 5.12.7, when the server is configured with a nonzero handlerTimeout and a route returns a streaming response, a request whose stream has already sent its headers but stays open past the timeout crashes the server. When the timeout...
CVE-2026-120216
The fastify web framework for Node.js (versions 5.8.0 through 5.12.7 ) is vulnerable to a Denial of Service (DoS) condition. When the server is configured with a non-zero handlerTimeout and a route returns a streaming response , a request that remains open past the timeout—but has already sent it...
EUVD-2026-115128
fastify is a web framework for Node.js. In versions 5.8.0 through 5.12.7, when the server is configured with a nonzero handlerTimeout and a route returns a streaming response, a request whose stream has already sent its headers but stays open past the timeout crashes the server. When the timeout...
CVE-2026-120216 fastify vulnerable to Denial of Service via uncaught exception on handlerTimeout with streaming responses
fastify is a web framework for Node.js. In versions 5.8.0 through 5.12.7, when the server is configured with a nonzero handlerTimeout and a route returns a streaming response, a request whose stream has already sent its headers but stays open past the timeout crashes the server. When the timeout...
PT-2026-135407
Name of the Vulnerable Software and Affected Versions fastify versions 5.8.0 through 5.12.7 Description A denial of service issue exists when the server is configured with a nonzero handlerTimeout and a route returns a streaming response. If a request stream remains open beyond the timeout after...
CVE-2026-120216: fastify: fastify is a web framework for Node.js
fastify is a web framework for Node.js. In versions 5.8.0 through 5.12.7, when the server is configured with a nonzero handlerTimeout and a route returns a streaming response, a request whose stream has already sent its headers but stays open past the timeout crashes the server. When the timeout...