ROOT-APP-NPM-CVE-2026-77078 CVE-2026-77078 in multer - Patched by Root

Root has patched CVE-2026-77078 in the multer package for Root:npm. Multiple fixed versions available...

4591-libs (>=0.0.1, <=0.2.0), @10abdullahbutt/nestjs-boilerplate (0.0.1) +1565 more potentially affected by CVE-2026-77078 via multer (>=2.0.0-alpha.2, <=2.2.0)

multer NPM version =2.0.0-alpha.2, =0.0.1, =0.0.1-alpha.1, =0.0.1-alpha.9, =0.0.1, =1.0.0, =0.1.1, =0.0.1, =0.0.1, =0.0.1, =0.1.0, =0.0.2, =0.0.10, =1.0.0, =0.0.3, =0.0.8 and more Source cves: CVE-2026-77078 Source advisory: GHSA-WC9G-MQFW-JRWM...

4591-libs (>=0.0.1, <=0.2.0), @10abdullahbutt/nestjs-boilerplate (0.0.1) +1565 more potentially affected by CVE-2026-77078 via multer (>=2.0.0-alpha.2, <=2.2.0)

multer NPM version =2.0.0-alpha.2, =0.0.1, =0.0.1-alpha.1, =0.0.1-alpha.9, =0.0.1, =1.0.0, =0.1.1, =0.0.1, =0.0.1, =0.0.1, =0.1.0, =0.0.2, =0.0.10, =1.0.0, =0.0.3, =0.0.8 and more Source cves: CVE-2026-77078 Source advisory: OSV:GHSA-WC9G-MQFW-JRWM...

CVE-2026-77078

creationtimestamp| type| source ---|---|--- 2026-08-29 06:02:46+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mu77cocbkw22 2026-09-22 07:00:03+00:00| published-proof-of-concept| Telegram/N-PGdqpLovLlQNbFQgrQqO8zEkhxsB1txl4jHkkqUA3cCi4 2026-09-23 00:00:26+00:00|...

4591-libs (>=0.0.1, <=0.2.0), @10abdullahbutt/nestjs-boilerplate (0.0.1) +1565 more potentially affected by CVE-2026-77078 via multer (>=2.0.0-alpha.2, <=2.2.0)

multer NPM version =2.0.0-alpha.2, =0.0.1, =0.0.1-alpha.1, =0.0.1-alpha.9, =0.0.1, =1.0.0, =0.1.1, =0.0.1, =0.0.1, =0.0.1, =0.1.0, =0.0.2, =0.0.10, =1.0.0, =0.0.3, =0.0.8 and more Source cves: CVE-2026-77078 Source advisory: SNYK:JS-MULTER-19432021...

02url-querystring-http (>=1.0.1, <=1.0.4), 1-0-5-hai-aage-dekhte-hein-kya-aat-hai (>=1.0.5, <=1.0.6) +12875 more potentially affected by CVE-2026-77078 via multer (>=0.0.5, <=2.2.0)

multer NPM version =0.0.5, =1.0.1, =1.0.5, =2.0.0, =1.0.0, =1.0.0, =1.0.0, =0.0.1, =1.0.0, =1.0.3 - 6e-alpha-backend-admin 1.0.0 and more Source cves: CVE-2026-77078 Source advisory: MEND:CVE-2026-77078...