MU
Product
multer
13
CVEs
0
On KEV
8.7
Max CVSS
0
New 30D
Severity mix
Critical 0High 12Medium 0Low 1
Watch
Add multer to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-48997 | 8.7 | Jun 3 | Multer vulnerable to Denial of Service via unhandled exception Affected: >= 1.4.4-lts.1, < 2.0.1 |
| CVE-2026-82333 | 7.5 | Aug 28 | multer vulnerable to Denial of Service via oversized array index in field names Affected: before 2.3.0 |
| CVE-2026-77078 | 7.5 | Aug 28 | multer vulnerable to Denial of Service via crafted multipart field names Affected: before 2.3.0 |
| CVE-2026-77037 | 7.5 | Aug 28 | multer vulnerable to Denial of Service via file descriptor leak on aborted uploads Affected: 2.2.0 |
| CVE-2026-5038 | 7.5 | Jun 15 | multer vulnerable to Denial of Service via incomplete cleanup of aborted uploads Affected: 2.0.0 before 2.2.0; 3.0.0 |
| CVE-2026-5079 | 7.5 | Jun 15 | multer vulnerable to Denial of Service via deeply nested field names Affected: 1.0.0 before 2.2.0; 3.0.0 |
| CVE-2026-3520 | 7.5 | Mar 4 | Multer vulnerable to Denial of Service via uncontrolled recursion Affected: before 2.1.1 |
| CVE-2026-3304 | 7.5 | Feb 27 | Multer vulnerable to Denial of Service via incomplete cleanup Affected: 0.0.0 before 2.1.0 |
| CVE-2026-2359 | 7.5 | Feb 27 | Multer vulnerable to Denial of Service via resource exhaustion Affected: 0.0.0 before 2.1.0 |
| CVE-2025-7338 | 7.5 | Jul 17 | Multer vulnerable to Denial of Service via unhandled exception from malformed request Affected: 1.4.4-lts.1 before 2.0.2 |
| CVE-2025-47944 | 7.5 | May 19 | Multer vulnerable to Denial of Service from maliciously crafted requests Affected: >=1.4.4-lts.1, <2.0.0 |
| CVE-2025-47935 | 7.5 | May 19 | Multer vulnerable to Denial of Service via memory leaks from unclosed streams Affected: < 2.0.0 |
Showing 12