CVE-2026-87908

creationtimestamp| type| source ---|---|--- 2026-09-11 06:43:56+00:00| seen| https://bsky.app/profile/ulisesgascon.com/post/3mv7xo7qxms2t 2026-09-11 07:44:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/hqkqv6psx3wrx 2026-09-11 11:01:53+00:00| seen|...

CVE-2026-87908

multiparty is a Node.js library for parsing multipart/form-data request bodies. In versions from 2.1.0 up to but not including 4.3.1, the parser does not bound the amount of memory used while accumulating the headers of a single multipart part. An unauthenticated attacker can send a single reques...