Home
Home
Trends
Trends
Vulnerabilities
Vulnerabilities
News
News
Researchers
Researchers
Why dbugs?
Why dbugs?
Settings

Thinkerhao

#59187of 60,386
3.7Total CVSS
Vulnerabilities · 1
PT-2026-83357
2026-08-28
3.7
CVE-2026-77063
Npm
Multer
A race condition exists in the file stream handling when an application utilizes an asynchronous `fileFilter` in conjunction with the `fileSize` limit. This allows files that exceed the configured size limit to bypass the limit rejection. The impact is limited as the underlying multipart parser still truncates the stream at the size limit, meaning the issue is a bypass of the rejection mechanism rather than uncontrolled resource consumption.