What’s Vulnerable › Products

multer vulnerabilities

15 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 15 published in the last 12 months.

Check whether your multer version is affected

Latest multer vulnerabilities

• CVE-2026-113872 — multer vulnerable to Denial of Service via a pending asynchronous fileFilter after request teardown (CVSS 7.5)
• CVE-2026-88932 — multer vulnerable to Denial of Service via orphaned disk writes on aborted uploads (CVSS 5.3)
• CVE-2026-82333 — multer vulnerable to Denial of Service via oversized array index in field names (CVSS 7.5)
• CVE-2026-77078 — multer vulnerable to Denial of Service via crafted multipart field names (CVSS 7.5)
• CVE-2026-77063 — multer vulnerable to file size limit bypass via async fileFilter race condition (CVSS 3.7)
• CVE-2026-77037 — multer vulnerable to Denial of Service via file descriptor leak on aborted uploads (CVSS 7.5)
• CVE-2026-5038 — multer vulnerable to Denial of Service via incomplete cleanup of aborted uploads (CVSS 7.5)
• CVE-2026-5079 — multer vulnerable to Denial of Service via deeply nested field names (CVSS 7.5)
• CVE-2026-3520 — Multer vulnerable to Denial of Service via uncontrolled recursion (CVSS 7.5)
• CVE-2026-3304 — Multer vulnerable to Denial of Service via incomplete cleanup (CVSS 7.5)
• CVE-2026-2359 — Multer vulnerable to Denial of Service via resource exhaustion (CVSS 7.5)
• CVE-2025-7338 — Multer vulnerable to Denial of Service via unhandled exception from malformed request (CVSS 7.5)
• CVE-2025-48997 — Multer vulnerable to Denial of Service via unhandled exception (CVSS 8.7)
• CVE-2025-47944 — Multer vulnerable to Denial of Service from maliciously crafted requests (CVSS 7.5)
• CVE-2025-47935 — Multer vulnerable to Denial of Service via memory leaks from unclosed streams (CVSS 7.5)