Описание
Denial of Service vulnerability with large JSON payloads in fastify
Affected versions of fastify are vulnerable to a denial of service when processing a request with Content-Type set to application/json and a very large payload.
Recommendation
Update to version 0.38.0 or later.
Пакеты
Наименование
fastify
npm
Затронутые версииВерсия исправления
<= 0.37.0
0.38.0
Связанные уязвимости
CVSS3: 7.5
nvd
больше 7 лет назад
Fastify node module before 0.38.0 is vulnerable to a denial-of-service attack by sending a request with "Content-Type: application/json" and a very large payload.