MU
Vendor
multer
8
CVEs
0
On KEV
1
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-113872 New | MU multer multer | 7.5 | Oct 22 | multer vulnerable to Denial of Service via a pending asynchronous fileFilter after request teardown |
| CVE-2026-88932 | MU multer multer | 5.3 | Sep 14 | multer vulnerable to Denial of Service via orphaned disk writes on aborted uploads |
| CVE-2026-82333 | MU multer multer | 7.5 | Aug 28 | multer vulnerable to Denial of Service via oversized array index in field names |
| CVE-2026-77078 | MU multer multer | 7.5 | Aug 28 | multer vulnerable to Denial of Service via crafted multipart field names |
| CVE-2026-77063 | MU multer multer | 3.7 | Aug 28 | multer vulnerable to file size limit bypass via async fileFilter race condition |
| CVE-2026-77037 | MU multer multer | 7.5 | Aug 28 | multer vulnerable to Denial of Service via file descriptor leak on aborted uploads |
| CVE-2026-5038 | MU multer multer | 7.5 | Jun 15 | multer vulnerable to Denial of Service via incomplete cleanup of aborted uploads |
| CVE-2026-5079 | MU multer multer | 7.5 | Jun 15 | multer vulnerable to Denial of Service via deeply nested field names |