Description
@fastify/multipart is a Fastify plugin for parsing the multipart content-type. Prior to versions 8.3.1 and 9.0.3, the `saveRequestFiles` function does not delete the uploaded temporary files when user cancels the request. The issue is fixed in versions 8.3.1 and 9.0.3. As a workaround, do not use `saveRequestFiles`.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| fastify | fastify-multipart | < 8.3.1, >= 9.0.0, < 9.0.3 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | @fastify/multipart | < 8.3.1 | 8.3.1 | GHSA-27c6-mcxv-x3fh |
| npm | @fastify/multipart | >= 9.0.0, < 9.0.3 | 9.0.3 | GHSA-27c6-mcxv-x3fh |