CVE-2025-24033

Name of the Vulnerable Software and Affected Versions @fastify/multipart versions prior to 8.3.1 @fastify/multipart versions prior to 9.0.3

Description @fastify/multipart is a Fastify plugin used for parsing the multipart content-type. The saveRequestFiles() function fails to delete uploaded temporary files if a user cancels the request. This improper resource management can be exploited by a remote attacker sending specially crafted requests to cause a denial of service.

Recommendations Update to version 8.3.1 or newer. Update to version 9.0.3 or newer. As a temporary workaround, avoid using the saveRequestFiles() function.