pkg:npm/multer

All known vulnerabilities

• HIGH7.5CVE-2026-5079Multer vulnerable to Denial of Service via deeply nested field names
  >= 1.0.0, < 2.2.0
• HIGH7.5CVE-2025-7338Multer vulnerable to Denial of Service via unhandled exception from malformed request
  >= 1.4.4-lts.1, < 2.0.2
• HIGH7.5CVE-2025-47944Multer vulnerable to Denial of Service from maliciously crafted requests
  >= 1.4.4-lts.1, < 2.0.0
• HIGH7.5Multer vulnerable to Denial of Service via memory leaks from unclosed streams
  from 0, < 2.0.0
• MEDIUM5.3Multer vulnerable to Denial of Service via incomplete cleanup of aborted uploads
  >= 2.0.0-alpha.1, < 2.2.0
• —Multer Vulnerable to Denial of Service via Uncontrolled Recursion
  from 0, < 2.1.1
• —Multer vulnerable to Denial of Service via incomplete cleanup
  from 0, < 2.1.0
• —Multer vulnerable to Denial of Service via resource exhaustion
  from 0, < 2.1.0
• —Multer vulnerable to Denial of Service via unhandled exception
  >= 1.4.4-lts.1, < 2.0.1