@fastify/multipart Schwachstellen (CVE)

Für @fastify/multipart veröffentlichte CVE-Einträge, neueste zuerst. Folgen Sie, um bei neuen Einträgen eine E-Mail zu erhalten.

3 Ergebnisse

5.9Mittel

CVE-2026-117531 vor 13 Tagen

@fastify/multipart vulnerable to Denial of Service via a malformed upload hanging delayed file consumers

@fastify/multipart @fastify/multipart

@fastify/multipart is the multipart form-data and file upload plugin for the Fastify web framework. In versions 5.3.0 through 10.1.6, the plugin does not propagate a parser error to the file stream when a request body ends inside a file part with no closing b…

7.5Hoch

CVE-2026-19474 vor 3 Monaten

@fastify/multipart vulnerable to Denial of Service via temporary file leak on aborted upload

@fastify/multipart @fastify/multipart

@fastify/multipart is a multipart form-data parser for Fastify. In versions from 3.0.0 up to but not including 10.1.1, request.saveRequestFiles() can leave completed temporary files on disk when a client disconnects while the parser is advancing between multi…

7.5Hoch

CVE-2026-18549 vor 3 Monaten

@fastify/multipart vulnerable to Denial of Service via aborted upload after fileSize limit

@fastify/multipart @fastify/multipart

@fastify/multipart is a multipart form-data parser for Fastify. In versions from 5.3.0 up to but not including 10.1.1, when the busboy fileSize limit truncates a file part, the plugin clears its internal current-file reference while the underlying stream is s…