Expressjs / Multer
13 CVEs
| CVE ID | Description | Severity | CVSS | Published |
|---|---|---|---|---|
| CVE-2026-82333 | multer vulnerable to Denial of Service via oversized array index in field names | HIGH | 7.5 | Aug 28, 2026 |
| CVE-2026-77078 | multer vulnerable to Denial of Service via crafted multipart field names | HIGH | 7.5 | Aug 28, 2026 |
| CVE-2026-77063 | multer vulnerable to file size limit bypass via async fileFilter race condition | LOW | 3.7 | Aug 28, 2026 |
| CVE-2026-77037 | multer vulnerable to Denial of Service via file descriptor leak on aborted uploads | HIGH | 7.5 | Aug 28, 2026 |
| CVE-2026-5038 | multer vulnerable to Denial of Service via incomplete cleanup of aborted uploads | HIGH | 7.5 | Jun 15, 2026 |
| CVE-2026-5079 | multer vulnerable to Denial of Service via deeply nested field names | HIGH | 7.5 | Jun 15, 2026 |
| CVE-2026-3520 | Multer vulnerable to Denial of Service via uncontrolled recursion | HIGH | 8.7 | Mar 4, 2026 |
| CVE-2026-3304 | Multer vulnerable to Denial of Service via incomplete cleanup | HIGH | 8.7 | Feb 27, 2026 |
| CVE-2026-2359 | Multer vulnerable to Denial of Service via resource exhaustion | HIGH | 8.7 | Feb 27, 2026 |
| CVE-2025-7338 | Multer vulnerable to Denial of Service via unhandled exception from malformed request | HIGH | 7.5 | Jul 17, 2025 |
| CVE-2025-48997 | Multer vulnerable to Denial of Service via unhandled exception | HIGH | 8.7 | Jun 3, 2025 |
| CVE-2025-47944 | Multer vulnerable to Denial of Service from maliciously crafted requests | HIGH | 7.5 | May 19, 2025 |
| CVE-2025-47935 | Multer vulnerable to Denial of Service via memory leaks from unclosed streams | HIGH | 7.5 | May 19, 2025 |
Showing 1 to 13 of 13 CVEs