1 matches found
CVE-2026-77063 multer vulnerable to file size limit bypass via async fileFilter race condition
multer is a middleware for handling multipart/form-data in Node.js. When an application uses an asynchronous fileFilter together with the fileSize limit, a race condition in multer's file stream handling can allow a file that exceeds the configured size limit to bypass the size-limit rejection. A...
3.7CVSS5.5AI score
SaveExploits0References4
20