Skip to content
OpenAdvisories

Vendor

@fastify/cors

1 known vulnerabilities.

Products

@fastify/cors 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 3.7
    CVE-2026-120215

    @fastify/cors vulnerable to Denial of Service on a CORS preflight with the onSend hook

    @fastify/cors is the CORS plugin for the Fastify web framework. In versions 8.2.0 through 11.3.x, an application that registers the plugin with the non-default onSend hook option crashes on a CORS preflight. On an OPTIONS request that carries the Origin and A…

    @fastify/cors @fastify/cors