MU
Product
multer
8
CVEs
0
On KEV
7.5
Max CVSS
1
New 30D
Severity mix
Critical 0High 6Medium 1Low 1
Watch
Add multer to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-113872 New | 7.5 | Oct 22 | multer vulnerable to Denial of Service via a pending asynchronous fileFilter after request teardown Affected: 2.0.0 before 2.5.0 |
| CVE-2026-82333 | 7.5 | Aug 28 | multer vulnerable to Denial of Service via oversized array index in field names Affected: before 2.3.0 |
| CVE-2026-77078 | 7.5 | Aug 28 | multer vulnerable to Denial of Service via crafted multipart field names Affected: before 2.3.0 |
| CVE-2026-77037 | 7.5 | Aug 28 | multer vulnerable to Denial of Service via file descriptor leak on aborted uploads Affected: 2.2.0 before 2.3.0 |
| CVE-2026-5038 | 7.5 | Jun 15 | multer vulnerable to Denial of Service via incomplete cleanup of aborted uploads Affected: 2.0.0-alpha.1 before 2.2.0; 3.0.0-alpha.1 before 3.0.0-alpha.2 |
| CVE-2026-5079 | 7.5 | Jun 15 | multer vulnerable to Denial of Service via deeply nested field names Affected: 1.0.0 before 2.2.0; 3.0.0-alpha.1 before 3.0.0-alpha.2 |
| CVE-2026-88932 | 5.3 | Sep 14 | multer vulnerable to Denial of Service via orphaned disk writes on aborted uploads Affected: 2.2.0 before 2.4.0 |
| CVE-2026-77063 | 3.7 | Aug 28 | multer vulnerable to file size limit bypass via async fileFilter race condition Affected: before 2.3.0 |
Showing 8