Vulnerabilidades em multer
8 resultadosAnálise Vexday
O Multer apresenta 2 vulnerabilidades catalogadas, ambas publicadas nos últimos 90 dias, com foco em controle de recursos (CWE-400). Nenhuma está sob exploração ativa conhecida (KEV) e não há críticas de severidade máxima, indicando risco moderado e recente que requer monitoramento.
CVE-2026-88932MEDIUMmulter vulnerable to Denial of Service via orphaned disk writes on aborted uploadsEPSS 0.5%CVE-2026-77078HIGHmulter vulnerable to Denial of Service via crafted multipart field namesEPSS 0.5%CVE-2026-77037HIGHmulter vulnerable to Denial of Service via file descriptor leak on aborted uploadsEPSS 0.5%CVE-2026-113872HIGHmulter vulnerable to Denial of Service via a pending asynchronous fileFilter after request teardownEPSS 0.4%CVE-2026-5038MEDIUMmulter vulnerable to Denial of Service via incomplete cleanup of aborted uploadsEPSS 0.4%CVE-2026-82333HIGHmulter vulnerable to Denial of Service via oversized array index in field namesEPSS 0.4%CVE-2026-5079HIGHmulter vulnerable to Denial of Service via deeply nested field namesEPSS 0.3%CVE-2026-77063LOWmulter vulnerable to file size limit bypass via async fileFilter race conditionEPSS 0.2%