CVE-2025-47944
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2025-47944
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-47944.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2025-47944
- Aliases
- Published
- 2025-05-19T20:15:26Z
- Modified
- 2025-05-21T22:53:57.852029Z
- Summary
- [none]
- Details
-
Multer is a node.js middleware for handling
multipart/form-data. A vulnerability that is present starting in version 1.4.4-lts.1 and prior to version 2.0.0 allows an attacker to trigger a Denial of Service (DoS) by sending a malformed multi-part upload request. This request causes an unhandled exception, leading to a crash of the process. Users should upgrade to version 2.0.0 to receive a patch. No known workarounds are available. - References