CVE-2020-8192

6.5

MEDIUMCVSS v3

Published

July 30, 2020

CVSS v2

4 MEDIUM

Affected

2 projects

Assigned by

[email protected]

Severity scale

010

Description

A denial of service vulnerability exists in Fastify v2.14.1 and v3.0.0-rc.4 that allows a malicious user to trigger resource exhaustion (when the allErrors option is used) with specially crafted schemas.

fastify

NPMFast and low overhead web framework, for Node.js

= 3.0.0, = 2.14.1NVD

fastify/fastify

GitHubFast and low overhead web framework, for Node.js

= 3.0.0, = 2.14.1NVD

More on this CVE

NVD↗GitHub Advisory↗

Security Advisories

CVE-2020-8192

Description

More on this CVE