ROOT-APP-NPM-CVE-2025-47944 CVE-2025-47944 in multer - Patched by Root

Root has patched CVE-2025-47944 in the multer package for Root:npm. Multiple fixed versions available...

CVE-2026-47944

creationtimestamp| type| source ---|---|--- 2026-06-10 20:03:54+00:00| seen| https://bsky.app/profile/experiencedigest.bsky.social/post/3mnxiz4zutw2q...

CVE-2026-47944

Adobe Experience Manager (AEM) versions 6.5.24, LTS SP1, 2026.04 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability. A low-privileged attacker can inject malicious scripts into vulnerable form fields, with malicious JavaScript executed in a victim’s browser when visitin...

CVE-2026-47944 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's...

Security Bulletin: IBM watsonx Orchestrate Developer Edition affected by vulnerability in multer-1.4.5-lts.2.tgz

Summary Security Bulletin: IBM watsonx Orchestrate Developer Edition affected by vulnerability in multer-1.4.5-lts.2.tgz Vulnerability Details CVEID:CVE-2025-47935 DESCRIPTION: Multer is a node.js middleware for handling multipart/form-data. Versions prior to 2.0.0 are vulnerable to a resource...

Security Bulletin: IBM watsonx Orchestrate Cartridge affected by vulnerability in multer-1.4.5-lts.1.tgz

Summary IBM watsonx Orchestrate Cartridge contains a vulnerable version of multer-1.4.5-lts.1.tgz Vulnerability Details CVEID:CVE-2025-47935 DESCRIPTION: Multer is a node.js middleware for handling multipart/form-data. Versions prior to 2.0.0 are vulnerable to a resource exhaustion and memory lea...

Security Bulletin: IBM OpenPages fixes multer package vulnerability

Summary Vulnerability in the multer-1.4.5-lts.1.tgz package with IBM OpenPages has been addressed in the latest IBM OpenPages fix pack version for 9.0 and mod version for 9.1 Vulnerability Details CVEID:CVE-2025-47935 DESCRIPTION: Multer is a node.js middleware for handling multipart/form-data...

Security Bulletin: Vulnerabilities in Multer affects IBM watsonx Orchestrate with watsonx Assistant Cartridge

Summary Potential vulnerability in Multer has been identified that affects IBM watsonx Orchestrate with watsonx Assistant Cartridge - UAB Component. The vulnerability has been addressed. Refer to details for additional information. Vulnerability Details CVEID:CVE-2025-47935 DESCRIPTION: Multer is...

CVE-2025-47944 vulnerabilities

Vulnerabilities for packages: grafana-image-renderer...

CVE-2025-47944 vulnerabilities

Vulnerabilities for packages: grafana-image-renderer...

CVE-2025-47944

Multer is a node.js middleware for handling multipart/form-data. A vulnerability that is present starting in version 1.4.4-lts.1 and prior to version 2.0.0 allows an attacker to trigger a Denial of Service DoS by sending a malformed multi-part upload request. This request causes an unhandled...

02url-querystring-http (>=1.0.1, <=1.0.4), 1-0-5-hai-aage-dekhte-hein-kya-aat-hai (>=1.0.5, <=1.0.6) +10141 more potentially affected by CVE-2025-47944 via multer (>=1.4.4, <=1.4.5-lts.2)

multer NPM version =1.4.4, =1.0.1, =1.0.5, =2.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.3 - 6e-alpha-backend-admin 1.0.0 - 7-segunda-preentrega 1.0.0 and more Source cves: CVE-2025-47944 Source advisory: OSV:GHSA-4PG4-QVPC-4Q3H...

org.webjars.npm:nestjs__platform-express (>=8.4.7, <=9.0.0-next.2) potentially affected by CVE-2025-47944 via org.webjars.npm:multer (1.4.4-lts.1)

org.webjars.npm:multer MAVEN version 1.4.4-lts.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars.npm:multer and may be impacted: - org.webjars.npm:nestjsplatform-express =8.4.7, =9.0.0-next.2 Source cves: CVE-2025-47944 Source advisory:...

CVE-2025-47944

Multer is a node.js middleware for handling multipart/form-data. A vulnerability that is present starting in version 1.4.4-lts.1 and prior to version 2.0.0 allows an attacker to trigger a Denial of Service DoS by sending a malformed multi-part upload request. This request causes an unhandled...

CVE-2025-47944 Multer vulnerable to Denial of Service from maliciously crafted requests

Multer is a node.js middleware for handling multipart/form-data. A vulnerability that is present starting in version 1.4.4-lts.1 and prior to version 2.0.0 allows an attacker to trigger a Denial of Service DoS by sending a malformed multi-part upload request. This request causes an unhandled...

CVE-2025-47944 Multer vulnerable to Denial of Service from maliciously crafted requests

Multer is a node.js middleware for handling multipart/form-data. A vulnerability that is present starting in version 1.4.4-lts.1 and prior to version 2.0.0 allows an attacker to trigger a Denial of Service DoS by sending a malformed multi-part upload request. This request causes an unhandled...

CVE-2025-47944

creationtimestamp| type| source ---|---|--- 2025-05-19 17:28:32+00:00| seen| https://bsky.app/profile/ulisesgascon.com/post/3lpk3uxh4c22q 2025-05-19 19:39:08+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16917 2025-05-19 21:13:12+00:00| seen|...

CVE-2024-47944

creationtimestamp| type| source ---|---|--- 2024-10-15 11:55:13+00:00| seen| https://t.me/cvedetector/7895...

CVE-2024-47944 Missing Protection Mechanism for Alternate Hardware Interface

The device directly executes .patch firmware upgrade files on a USB stick without any prior authentication in the admin interface. This leads to an unauthenticated code execution via the firmware upgrade function...

CVE-2024-47944 Missing Protection Mechanism for Alternate Hardware Interface

The device directly executes .patch firmware upgrade files on a USB stick without any prior authentication in the admin interface. This leads to an unauthenticated code execution via the firmware upgrade function...