Skip to content
Threat Feed

Product

@Fastify/Accepts-Serializer (<= 6.0.3)

1 brief RSS
medium advisory

Fastify accepts-serializer Denial of Service via Unbounded Accept Header Cache Growth

The @fastify/accepts-serializer package is vulnerable to a denial of service (DoS) attack due to unbounded cache growth, where an attacker can send many distinct Accept header variants, causing the cache to grow unbounded, exhausting the Node.js heap, and crashing the process.

@fastify/accepts-serializer dos denial-of-service fastify
2r 1t 1c