Skip to content
OpenAdvisories

Package · npm

fastify-multipart

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • High 7.5
    CVE-2021-23597

    Denial of Service (DoS)

    This affects the package fastify-multipart before 5.3.1. By providing a name=constructor property it is still possible to crash the application. **Note:** This is a bypass of CVE-2020-8136 (https://security.snyk.io/vuln/SNYK-JS-FASTIFYMULTIPART-1290382).

    fastify-multipart npm
  • High 7.5
    CVE-2020-8136

    Uncontrolled Resource Consumption in fastify-multipart

    Prototype pollution vulnerability in fastify-multipart < 1.0.5 allows an attacker to crash fastify applications parsing multipart requests by sending a specially crafted request.

    fastify-multipart npm