fastify/busyboy vulnerabilities

CVEs whose affected-version data names the fastify/busyboy package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-74866Medium· 5.8

1mo ago

@fastify/busboy is a multipart form-data parser for Node.js

@fastify/busboy is a multipart form-data parser for Node.js. Its multipart part-header parser splits header lines only on the two-byte carriage-return line-feed sequence, so a lone carriage return or line feed embedded in a part header i…

▾ Sunlitfastify · fastify/busyboyEPSS 0.19%via NVD