CVE-2020-8192 - AskarLabs CVE Database

CVE-2020-8192

Vendor N/A

Product fastify

Weakness CWE-400

Published July 30, 2020

Last update August 4, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

A denial of service vulnerability exists in Fastify v2.14.1 and v3.0.0-rc.4 that allows a malicious user to trigger resource exhaustion (when the allErrors option is used) with specially crafted schemas.

Key dates

02Disclosure timeline

July 30, 2020 CVE published

August 4, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2020-8192 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/400.html

Related vulnerabilities

04Related CVE

CVE-2026-22690 pypdf has possible long runtimes for missing /Root object with large /Size values CVE-2022-31110 Denial of Service (DoS) vulnerability in RSSHub CVE-2022-28691 CVE-2022-41968 Nextcloud Server's calendar name length not validated before writing to database CVE-2024-12761 Denial of Service in brycedrennan/imaginairy