Skip to content
OpenAdvisories
High · 7.5 CVE-2020-8136 EUVD-2021-1148GHSA-p9f8-gqjf-m75j

Uncontrolled Resource Consumption in fastify-multipart

Published Mar 20, 2020 · Updated Aug 4, 2024 · Assigned by hackerone

Description

Prototype pollution vulnerability in fastify-multipart < 1.0.5 allows an attacker to crash fastify applications parsing multipart requests by sending a specially crafted request.

Affected products

VendorProductAffectedFixed
— fastify-multipart Fixed version: 1.0.5 —

Affected packages

EcosystemPackageAffectedFixedRecord
npm fastify-multipart < 1.0.5 1.0.5 GHSA-p9f8-gqjf-m75j

References