@fastify/accepts-serializer versions prior to 6.0.4 are vulnerable to a denial of service condition caused by unbounded growth of a cache keyed by the HTTP Accept header. An unauthenticated remote attacker can send many distinct Accept header variants to exhaust the Node.js heap, causing the process to crash.