7703 matches found
CVE-2026-19474 @fastify/multipart vulnerable to Denial of Service via temporary file leak on aborted upload
@fastify/multipart is a multipart form-data parser for Fastify. In versions from 3.0.0 up to but not including 10.1.1, request.saveRequestFiles can leave completed temporary files on disk when a client disconnects while the parser is advancing between multipart parts. The iterator rejection that...
7.5CVSS
SaveExploits0References2
20