multer

7 known vulnerabilities in multer, with patch priority, exploit likelihood and the news covering them.

Latest vulnerabilities

  • CVE-2026-88932 CVSS 5.3 medium multer is a Node.js middleware for handling multipart/form-data uploads. In versions 2.2.0 through 2.3.0, when a request using disk…
  • CVE-2026-82333 CVSS 7.5 high multer is a middleware for handling multipart/form-data in Node.js. A small multipart request with two specially crafted text field names…
  • CVE-2026-77078 CVSS 7.5 high multer is a middleware for handling multipart/form-data in Node.js. A small multipart request containing two specially crafted text field…
  • CVE-2026-77063 CVSS 3.7 low multer is a middleware for handling multipart/form-data in Node.js. When an application uses an asynchronous fileFilter together with the…
  • CVE-2026-77037 CVSS 7.5 high multer is a middleware for handling multipart/form-data in Node.js. In version 2.2.0, when a disk-backed upload is aborted or truncated…
  • CVE-2026-5038 CVSS 7.5 high Impact: multer versions 2.0.0-alpha.1 through 2.1.1 and 3.0.0-alpha.1 are vulnerable to a Denial of Service when using diskStorage…
  • CVE-2026-5079 CVSS 7.5 high Impact: multer versions 1.0.0 through 2.1.1 and 3.0.0-alpha.1 are vulnerable to a Denial of Service via deeply nested field names in…