265 matches found
multer-sca-rule-test_cve-2025-7338
This repository does not have a README...
ROOT-APP-NPM-CVE-2025-47944 CVE-2025-47944 in multer - Patched by Root
Root has patched CVE-2025-47944 in the multer package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2025-7338 CVE-2025-7338 in multer - Patched by Root
Root has patched CVE-2025-7338 in the multer package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-3520 CVE-2026-3520 in multer - Patched by Root
Root has patched CVE-2026-3520 in the multer package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2025-48997 CVE-2025-48997 in multer - Patched by Root
Root has patched CVE-2025-48997 in the multer package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-2359 CVE-2026-2359 in multer - Patched by Root
Root has patched CVE-2026-2359 in the multer package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-5079 CVE-2026-5079 in multer - Patched by Root
Root has patched CVE-2026-5079 in the multer package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-77078 CVE-2026-77078 in multer - Patched by Root
Root has patched CVE-2026-77078 in the multer package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-82333 CVE-2026-82333 in multer - Patched by Root
Root has patched CVE-2026-82333 in the multer package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-3304 CVE-2026-3304 in multer - Patched by Root
Root has patched CVE-2026-3304 in the multer package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2025-47935 CVE-2025-47935 in multer - Patched by Root
Root has patched CVE-2025-47935 in the multer package for Root:npm. Multiple fixed versions available...
CVE-2026-3304
CVE-2026-3304 Lab Environment For educational and research purposes only. Attacking systems without authorization is illegal. This lab environment was built by analyzing the Multer 2.1.0 patch and its official test code. The vulnerable server replicates the exact conditions described in the patch...
EUVD-2026-67930
multer vulnerable to Denial of Service via crafted multipart field names...
multer vulnerable to Denial of Service via crafted multipart field names
Impact A vulnerability in multer allows a remote, unauthenticated attacker to crash the Node.js process with a single multipart/form-data request. Two specially crafted text field names cause an uncaught RangeError: Invalid array length inside multer's field parsing, which is not routed to the...
multer vulnerable to Denial of Service via file descriptor leak on aborted uploads
Impact A vulnerability in multer 2.2.0 allows an attacker to trigger a Denial of Service DoS by aborting or truncating multipart uploads. When using diskStorage, the destination write stream is not closed if the upload is aborted before it finishes, so each failed request leaks an open file...
EUVD-2026-67928
multer vulnerable to Denial of Service via file descriptor leak on aborted uploads...
multer vulnerable to file size limit bypass via async fileFilter race condition
Impact When multer is configured with an asynchronous fileFilter, the limits.fileSize limit can be bypassed. The 'limit' event is registered inside the async fileFilter callback, so if a file exceeds limits.fileSize before that callback runs, the event is missed and the oversized upload is accept...
EUVD-2026-67929
multer vulnerable to file size limit bypass via async fileFilter race condition...
multer vulnerable to Denial of Service via oversized array index in field names
Impact multer is vulnerable to a Denial of Service DoS via a crafted array index in multipart field names. The append-field dependency parses bracket notation in field names, and a large numeric index such as items4294967294 forces allocation of a maximum-length sparse array. A following field wi...