Home
Home
Trends
Trends
Vulnerabilities
Vulnerabilities
News
News
Researchers
Researchers
Why dbugs?
Why dbugs?
Settings

Manuel Spigolon

#42239of 60,391
7.5Total CVSS
Vulnerabilities · 1
PT-2026-36915
2026-05-04
7.5
CVE-2026-7768
Npm
@Fastify/Accepts-Serializer
An issue exists where serializer-selection results are cached using the request `Accept` header as a key without a size limit or eviction policy. A remote unauthenticated client can send numerous distinct but matching `Accept` header variants, causing the cache to grow unbounded. This can lead to the exhaustion of the Node.js heap and result in a process crash, causing a Denial of Service (DoS).