Skip to content
OpenAdvisories

Package · Debian

node-multer

6 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 3.7
    CVE-2026-77063

    multer vulnerable to file size limit bypass via async fileFilter race condition

    multer is a middleware for handling multipart/form-data in Node.js. When an application uses an asynchronous fileFilter together with the fileSize limit, a race condition in multer's file stream handling can allow a file that exceeds the configured size limit…

    multer multer multer node-multer Debian npm