Skip to content
OpenAdvisories

Product · fastify

fastify-multipart

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.5
    CVE-2025-24033

    @fastify/multipart vulnerable to unlimited consumption of resources

    @fastify/multipart is a Fastify plugin for parsing the multipart content-type. Prior to versions 8.3.1 and 9.0.3, the `saveRequestFiles` function does not delete the uploaded temporary files when user cancels the request. The issue is fixed in versions 8.3.1 …

    fastify fastify-multipart @fastify/multipart npm
  • High 7.5
    CVE-2023-25576

    @fastify/multipart vulnerable to DoS due to unlimited number of parts

    @fastify/multipart is a Fastify plugin to parse the multipart content-type. Prior to versions 7.4.1 and 6.0.1, @fastify/multipart may experience denial of service due to a number of situations in which an unlimited number of parts are accepted. This includes …

    fastify fastify-multipart @fastify/multipart npm