FA
Product
Fastify-multipart
by Fastify · last CVE Aug 15, 2026
5
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Severity mix
Critical 0High 5Medium 0Low 0
Watch

Add Fastify-multipart to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-19474
7.5
0%
Aug 15
@fastify/multipart vulnerable to Denial of Service via temporary file leak on aborted upload
Affected: 3.0.0 before 10.1.1
CVE-2026-18549
7.5
1%
Aug 15
@fastify/multipart vulnerable to Denial of Service via aborted upload after fileSize limit
Affected: 5.3.0 before 10.1.1
CVE-2023-25576
7.5
1%
Feb 14
@fastify/multipart is a Fastify plugin to parse the multipart content-type
Affected: before 6.0.1; 7.0.0 before 7.4.1
CVE-2021-23597
7.5
2%
Feb 11
This affects the package fastify-multipart before 5.3.1
Affected: before 5.3.1
CVE-2020-8136
7.5
1%
Mar 20
Prototype pollution vulnerability in fastify-multipart < 1.0.5 allows an attacker to crash fastify applications parsing multipart requests by sending a specially crafted request
Affected: before 1.0.5
Showing 5