FA
Product
Fastify-multipart
5
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Severity mix
Critical 0High 5Medium 0Low 0
Watch
Add Fastify-multipart to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-19474 | 7.5 | Aug 15 | @fastify/multipart vulnerable to Denial of Service via temporary file leak on aborted upload Affected: 3.0.0 before 10.1.1 |
| CVE-2026-18549 | 7.5 | Aug 15 | @fastify/multipart vulnerable to Denial of Service via aborted upload after fileSize limit Affected: 5.3.0 before 10.1.1 |
| CVE-2023-25576 | 7.5 | Feb 14 | @fastify/multipart is a Fastify plugin to parse the multipart content-type Affected: before 6.0.1; 7.0.0 before 7.4.1 |
| CVE-2021-23597 | 7.5 | Feb 11 | This affects the package fastify-multipart before 5.3.1 Affected: before 5.3.1 |
| CVE-2020-8136 | 7.5 | Mar 20 | Prototype pollution vulnerability in fastify-multipart < 1.0.5 allows an attacker to crash fastify applications parsing multipart requests by sending a specially crafted request Affected: before 1.0.5 |
Showing 5
