multer

Products

ProductCVEsExploitedLatest
multer8–Oct 22, 2026

Exploited and recent CVEs

  • CVE-2026-113872 High 7.5 multer vulnerable to Denial of Service via a pending asynchronous fileFilter after request teardown 0.4%
  • CVE-2026-88932 Medium 5.3 multer vulnerable to Denial of Service via orphaned disk writes on aborted uploads 0.5%
  • CVE-2026-82333 High 7.5 multer vulnerable to Denial of Service via oversized array index in field names 0.4%
  • CVE-2026-77078 High 7.5 multer vulnerable to Denial of Service via crafted multipart field names 0.5%
  • CVE-2026-77063 Low 3.7 multer vulnerable to file size limit bypass via async fileFilter race condition 0.2%
  • CVE-2026-77037 High 7.5 multer vulnerable to Denial of Service via file descriptor leak on aborted uploads 0.5%
  • CVE-2026-5038 Medium 5.3 multer vulnerable to Denial of Service via incomplete cleanup of aborted uploads 0.4%
  • CVE-2026-5079 High 7.5 multer vulnerable to Denial of Service via deeply nested field names 0.3%