Skip to content
OpenAdvisories

Vendor

@fastify/multipart

3 known vulnerabilities.

Products

@fastify/multipart 3
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.9
    CVE-2026-117531

    @fastify/multipart vulnerable to Denial of Service via a malformed upload hanging delayed file consumers

    @fastify/multipart is the multipart form-data and file upload plugin for the Fastify web framework. In versions 5.3.0 through 10.1.6, the plugin does not propagate a parser error to the file stream when a request body ends inside a file part with no closing b…

    @fastify/multipart @fastify/multipart