CVE-2026-117531

The @fastify/multipart plugin for the Fastify web framework (versions 5.3.0 through 10.1.6 ) contains a vulnerability where it fails to propagate parser errors to file streams when a request body ends inside a file part without a closing boundary. This causes handlers using delayed file consumers...