Skip to content
OpenAdvisories

Package · Debian

node-multer

6 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.5
    CVE-2026-113872 Public exploit

    multer vulnerable to Denial of Service via a pending asynchronous fileFilter after request teardown

    multer is a middleware for Node.js that handles multipart/form-data file uploads. In versions from 2.0.0 before 2.5.0, when multer is configured with an asynchronous fileFilter, a single request can crash the Node.js process. If the request is aborted while o…

    multer multer multer node-multer Debian npm
  • High 7.5
    CVE-2026-77078 Public exploit

    multer vulnerable to Denial of Service via crafted multipart field names

    multer is a middleware for handling multipart/form-data in Node.js. A small multipart request containing two specially crafted text field names can cause an uncaught RangeError (Invalid array length) that terminates the Node.js process. The first field uses a…

    multer multer multer node-multer Debian npm