FA
Product
fastify-multipart
6
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Severity mix
Critical 0High 6Medium 0Low 0
Watch
Add fastify-multipart to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-19474 | 7.5 | Aug 15 | @fastify/multipart vulnerable to Denial of Service via temporary file leak on aborted upload Affected: 3.0.0 before 10.1.1 |
| CVE-2026-18549 | 7.5 | Aug 15 | @fastify/multipart vulnerable to Denial of Service via aborted upload after fileSize limit Affected: 5.3.0 before 10.1.1 |
| CVE-2025-24033 | 7.5 | Jan 23 | @fastify/multipart vulnerable to unlimited consumption of resources Affected: < 8.3.1; >= 9.0.0, < 9.0.3 |
| CVE-2023-25576 | 7.5 | Feb 14 | @fastify/multipart vulnerable to DoS due to unlimited number of parts Affected: < 6.0.1; >= 7.0.0, < 7.4.1 |
| CVE-2021-23597 | 7.5 | Feb 11 | Denial of Service (DoS) Affected: before 5.3.1 |
| CVE-2020-8136 | 7.5 | Mar 20 | Prototype pollution vulnerability in fastify-multipart < 1.0.5 allows an attacker to crash fastify applications parsing multipart requests by sending a specially crafted request Affected: before 1.0.5 |
Showing 6