2 matches found
CVE-2023-25576
@fastify/multipart is a Fastify plugin to parse the multipart content-type. Prior to versions 7.4.1 and 6.0.1, @fastify/multipart may experience denial of service due to a number of situations in which an unlimited number of parts are accepted. This includes the multipart body parser accepting an...
@silenteer/natsu-port-server (>=0.0.38, <=0.0.54), @wmfs/tymly-fastify-plugin (>=1.85.0, <=1.87.0) potentially affected by CVE-2023-25576 via @fastify/multipart (6.0.0)
@fastify/multipart NPM version 6.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on @fastify/multipart and may be impacted: - @silenteer/natsu-port-server =0.0.38, =1.85.0, =1.87.0 Source cves: CVE-2023-25576 Source advisory: OSV:GHSA-HPP2-2CR5-PF6G...