multer vulnerabilities
CVEs whose affected-version data names the multer package (npm). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
4 CVEsRSS
CVE-2026-82333High· 7.5multer vulnerable to Denial of Service via oversized array index in field names
multer vulnerable to Denial of Service via oversized array index in field names
▾ Twilightmulter · multerEPSS 0.28%via GHSA
CVE-2026-77078High· 7.5multer vulnerable to Denial of Service via crafted multipart field names
multer vulnerable to Denial of Service via crafted multipart field names
▾ Twilightmulter · multerEPSS 0.29%via GHSA
CVE-2026-77063Low· 3.7multer vulnerable to file size limit bypass via async fileFilter race condition
multer vulnerable to file size limit bypass via async fileFilter race condition
▾ Sunlitmulter · multerEPSS 0.16%via GHSA
CVE-2026-77037High· 7.5multer vulnerable to Denial of Service via file descriptor leak on aborted uploads
multer vulnerable to Denial of Service via file descriptor leak on aborted uploads
▾ Twilightmulter · multerEPSS 0.35%via GHSA