@fastify/accepts-serializer vulnerabilities
We track 1 vulnerability in @fastify/accepts-serializer products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on May 4, 2026.
1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score
Latest @fastify/accepts-serializer vulnerabilities
- 7.5 High severity
@fastify/accepts-serializer: Allocation of Resources Without Limits or Throttling
@fastify/accepts-serializer cached serializer-selection results keyed by the request Accept header without a size limit or eviction policy. A remote unauthenticated client could send many distinct but matching Accept header variants to make the cache grow unbo