265 matches found
multer-sca-rule-test_cve-2025-7338
This repository does not have a README...
ROOT-APP-NPM-CVE-2025-7338 CVE-2025-7338 in multer - Patched by Root
Root has patched CVE-2025-7338 in the multer package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2025-47944 CVE-2025-47944 in multer - Patched by Root
Root has patched CVE-2025-47944 in the multer package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-3520 CVE-2026-3520 in multer - Patched by Root
Root has patched CVE-2026-3520 in the multer package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2025-48997 CVE-2025-48997 in multer - Patched by Root
Root has patched CVE-2025-48997 in the multer package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-2359 CVE-2026-2359 in multer - Patched by Root
Root has patched CVE-2026-2359 in the multer package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2025-47935 CVE-2025-47935 in multer - Patched by Root
Root has patched CVE-2025-47935 in the multer package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-82333 CVE-2026-82333 in multer - Patched by Root
Root has patched CVE-2026-82333 in the multer package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-77078 CVE-2026-77078 in multer - Patched by Root
Root has patched CVE-2026-77078 in the multer package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-3304 CVE-2026-3304 in multer - Patched by Root
Root has patched CVE-2026-3304 in the multer package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-5079 CVE-2026-5079 in multer - Patched by Root
Root has patched CVE-2026-5079 in the multer package for Root:npm. Multiple fixed versions available...
CVE-2026-3304
CVE-2026-3304 실습 환경 교육 및 연구 목적으로만 사용하십시오. 승인 없이 시스템을 공격하는 것은 불법입니다. 이 실습 환경은 Multer 2.1.0 패치와 공식 테스트 코드를 분석하여 구축되었습니다. 취약한 서버는 패치 테스트에 설명된 정확한 조건을 재현하며, 패치된 서버는 Multer 2.1.0을 실행하여 수정 사항이 작동하는지 확인합니다. 취약점 개요...
multer vulnerable to Denial of Service via crafted multipart field names
Impact A vulnerability in multer allows a remote, unauthenticated attacker to crash the Node.js process with a single multipart/form-data request. Two specially crafted text field names cause an uncaught RangeError: Invalid array length inside multer's field parsing, which is not routed to the...
EUVD-2026-67930
multer vulnerable to Denial of Service via crafted multipart field names...
multer vulnerable to Denial of Service via file descriptor leak on aborted uploads
Impact A vulnerability in multer 2.2.0 allows an attacker to trigger a Denial of Service DoS by aborting or truncating multipart uploads. When using diskStorage, the destination write stream is not closed if the upload is aborted before it finishes, so each failed request leaks an open file...
EUVD-2026-67928
multer vulnerable to Denial of Service via file descriptor leak on aborted uploads...
EUVD-2026-67929
multer vulnerable to file size limit bypass via async fileFilter race condition...
multer vulnerable to file size limit bypass via async fileFilter race condition
Impact When multer is configured with an asynchronous fileFilter, the limits.fileSize limit can be bypassed. The 'limit' event is registered inside the async fileFilter callback, so if a file exceeds limits.fileSize before that callback runs, the event is missed and the oversized upload is accept...
multer vulnerable to Denial of Service via oversized array index in field names
Impact multer is vulnerable to a Denial of Service DoS via a crafted array index in multipart field names. The append-field dependency parses bracket notation in field names, and a large numeric index such as items4294967294 forces allocation of a maximum-length sparse array. A following field wi...