Vulnerabilities

ID
Packages
Summary
Published
arrow_upward
Attributes
GHSA-3pph-fpjx-jg34
  • npm/multer
multer vulnerable to Denial of Service via orphaned disk writes on aborted uploads 28 Sep
  • Fix available
  • Severity - 5.3 (Medium)
GHSA-wc9g-mqfw-jrwm
  • npm/multer
multer vulnerable to Denial of Service via crafted multipart field names 08 Sep
  • Fix available
  • Severity - 7.5 (High)
GHSA-qfvm-cv95-jqjf
  • npm/multer
multer vulnerable to Denial of Service via file descriptor leak on aborted uploads 08 Sep
  • Fix available
  • Severity - 7.5 (High)
GHSA-qvfw-j98x-7q72
  • npm/multer
multer vulnerable to file size limit bypass via async fileFilter race condition 08 Sep
  • Fix available
  • Severity - 3.7 (Low)
GHSA-535w-7cp7-47q4
  • npm/multer
multer vulnerable to Denial of Service via oversized array index in field names 08 Sep
  • Fix available
  • Severity - 7.5 (High)
MAL-2026-10064
  • npm/multer-orm
Malicious code in multer-orm (npm) 09 Jul
  • No fix available
MAL-2026-6387
  • npm/multer-express
Malicious code in multer-express (npm) 24 Jun
  • No fix available
GHSA-72gw-mp4g-v24j
  • npm/multer
Multer vulnerable to Denial of Service via deeply nested field names 17 Jun
  • Fix available
  • Severity - 7.5 (High)
GHSA-3p4h-7m6x-2hcm
  • npm/multer
Multer vulnerable to Denial of Service via incomplete cleanup of aborted uploads 17 Jun
  • Fix available
  • Severity - 5.3 (Medium)
MAL-2026-2378
  • npm/node-multer
Malicious code in node-multer (npm) 24 Mar
  • No fix available
MAL-2026-2343
  • npm/chain-multer
Malicious code in chain-multer (npm) 24 Mar
  • No fix available
GHSA-5528-5vmv-3xc2
  • npm/multer
Multer Vulnerable to Denial of Service via Uncontrolled Recursion 05 Mar
  • Fix available
  • Severity - 8.7 (High)
GHSA-xf7r-hgr6-v32p
  • npm/multer
Multer vulnerable to Denial of Service via incomplete cleanup 01 Mar
  • Fix available
  • Severity - 8.7 (High)
GHSA-v52c-386h-88mc
  • npm/multer
Multer vulnerable to Denial of Service via resource exhaustion 01 Mar
  • Fix available
  • Severity - 8.7 (High)
MAL-2026-1016
  • npm/js-multer
Malicious code in js-multer (npm) 24 Feb
  • No fix available
MAL-2025-191549
  • npm/multer-cli
Malicious code in multer-cli (npm) 02 Dec 2025
  • No fix available