Lucene search
+L

1 matches found

Cvelist
Cvelist
added 2026/08/13 8:31 a.m.39 views

CVE-2026-19481 @fastify/busboy vulnerable to Denial of Service via prototype-named multipart part header

@fastify/busboy is a multipart form-data parser. In versions 1.0.0 through 3.2.0, an attacker who can submit multipart form-data can crash the parser by sending a part header whose name is a prototype-inherited property such as proto or constructor. The internal header parser stores headers in a...

7.5CVSS0.00278EPSS
SaveExploits0References2
Rows per page
Query Builder