CVE-2026-120215 | fastify fastify-cors up to 11.3.x OnSend Hook reply.send onSend denial of service

A vulnerability was found in fastify fastify-cors up to 11.3.x. It has been declared as problematic. Affected by this vulnerability is the function reply.send of the component OnSend Hook. The manipulation of the argument onSend results in denial of service.

This vulnerability is reported as CVE-2026-120215. The attack can be launched remotely. No exploit exists.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More