PT-2026-22346 · Npm · Multer

·

CVE-2026-3304

·

Published

2026-02-27

·

Updated

2026-07-27

CVSS v4.0

8.7

High

VectorAV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
Name of the Vulnerable Software and Affected Versions Multer versions prior to 2.1.0
Description A flaw exists in Multer, a node.js middleware used for processing multipart/form-data. This issue can be exploited to initiate a Denial of Service (DoS) attack by submitting specially crafted requests, which may lead to resource exhaustion.
Recommendations Upgrade to version 2.1.0 to address the issue.

Exploit

Fix

DoS

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2026-3304
GHSA-XF7R-HGR6-V32P

Affected Products

Multer