HIGH 7.5 npm
Denial of Service vulnerability with large JSON payloads in fastify
GHSA-mq6c-fh97-4gwv · CVE-2018-3711
Published · Modified
AI SAST
Find this class of vulnerability in your own code
Corgea's AI-native static analysis detects vulnerabilities like this one across your repositories, ranks them by exploitability, and returns review-ready fixes.
Description
Affected versions of fastify are vulnerable to a denial of service when processing a request with Content-Type set to application/json and a very large payload.
Recommendation
Update to version 0.38.0 or later.
References
- ADVISORY https://nvd.nist.gov/vuln/detail/CVE-2018-3711
- WEB https://github.com/fastify/fastify/pull/627
- WEB https://github.com/fastify/fastify/commit/fabd2a011f2ffbb877394abe699f549513ffbd76
- WEB https://hackerone.com/reports/303632
- ADVISORY https://github.com/advisories/GHSA-mq6c-fh97-4gwv
- WEB https://www.npmjs.com/advisories/564
Ready to move
Start Securing
Free, no credit card | First findings in minutes