PT-2026-22346

CVE-2026-3304

Published

2026-02-27

Updated

2026-10-29

Description by

CVSS 4.0

8.7

High

MetricsAV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Name of the Vulnerable Software and Affected Versions Multer versions prior to 2.1.0

Description A flaw exists in Multer, a node.js middleware used for processing multipart/form-data. This issue can be exploited to initiate a Denial of Service (DoS) attack by submitting specially crafted requests, which may lead to resource exhaustion.

Recommendations Upgrade to version 2.1.0 to address the issue.

Exploitability

Exploit

Fix

Impacts

Researchers

Ethankim88

Vendors

Affected products

Weakness enumeration

CWE-459: Incomplete Cleanup

Related identifiers