8 matches found
CVE-2026-120215
@fastify/cors is the CORS plugin for the Fastify web framework. In versions 8.2.0 through 11.3.x, an application that registers the plugin with the non-default onSend hook option crashes on a CORS preflight. On an OPTIONS request that carries the Origin and Access-Control-Request-Method headers,...
CVE-2026-120215
The @fastify/cors plugin for the Fastify web framework (versions 8.2.0 through 11.3.x ) contains a vulnerability where registering the plugin with a non-default onSend hook option causes the Node.js process to crash. During an OPTIONS request with specific headers, the plugin re-enters the send p...
CVE-2026-120215 @fastify/cors vulnerable to Denial of Service on a CORS preflight with the onSend hook
@fastify/cors is the CORS plugin for the Fastify web framework. In versions 8.2.0 through 11.3.x, an application that registers the plugin with the non-default onSend hook option crashes on a CORS preflight. On an OPTIONS request that carries the Origin and Access-Control-Request-Method headers,...
EUVD-2026-115123
@fastify/cors is the CORS plugin for the Fastify web framework. In versions 8.2.0 through 11.3.x, an application that registers the plugin with the non-default onSend hook option crashes on a CORS preflight. On an OPTIONS request that carries the Origin and Access-Control-Request-Method headers,...
CVE-2026-120215 @fastify/cors vulnerable to Denial of Service on a CORS preflight with the onSend hook
@fastify/cors is the CORS plugin for the Fastify web framework. In versions 8.2.0 through 11.3.x, an application that registers the plugin with the non-default onSend hook option crashes on a CORS preflight. On an OPTIONS request that carries the Origin and Access-Control-Request-Method headers,...
CVE-2026-120215 @fastify/cors vulnerable to Denial of Service on a CORS preflight with the onSend hook
@fastify/cors is the CORS plugin for the Fastify web framework. In versions 8.2.0 through 11.3.x, an application that registers the plugin with the non-default onSend hook option crashes on a CORS preflight. On an OPTIONS request that carries the Origin and Access-Control-Request-Method headers,...
PT-2026-135400
Name of the Vulnerable Software and Affected Versions @fastify/cors versions 8.2.0 through 11.3.x Description An application using the CORS plugin for the Fastify web framework may crash during a CORS preflight request if the plugin is registered with a non-default onSend hook option. When an...
CVE-2026-120215: @fastify/cors: @fastify/cors is the CORS plugin for the Fastify web framework
@fastify/cors is the CORS plugin for the Fastify web framework. In versions 8.2.0 through 11.3.x, an application that registers the plugin with the non-default onSend hook option crashes on a CORS preflight. On an OPTIONS request that carries the Origin and Access-Control-Request-Method headers,...