Description
Fastify node module before 0.38.0 is vulnerable to a denial-of-service attack by sending a request with "Content-Type: application/json" and a very large payload.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| HackerOne | fastify node module | Versions before 0.38.0 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | fastify | < 0.38.0 | 0.38.0 | GHSA-mq6c-fh97-4gwv |