Uncontrolled Resource Consumption in fastify-multipart

ALTO 7.5CVE-2020-8136 · GHSA-p9f8-gqjf-m75j · Published 20/03/2020 · updated 17/06/2026

En resumen

CVE-2020-8136 es una vulnerabilidad ALTO (CVSS 7.5) que afecta a fastify-multipart (fastify), fastify-multipart.
Probabilidad de explotación en los próximos 30 días (EPSS): 1.5%, mayor que el 74.2% de las vulnerabilidades.
Solución: actualizar a 1.0.5 o posterior.

Package	Affected versions	Patched versions
fastify-multipart fastify	`< 1.0.5`	`1.0.5`
fastify-multipart npm	`< 1.0.5`	`1.0.5`

Description

Prototype pollution vulnerability in fastify-multipart < 1.0.5 allows an attacker to crash fastify applications parsing multipart requests by sending a specially crafted request.

NVD description

Prototype pollution vulnerability in fastify-multipart < 1.0.5 allows an attacker to crash fastify applications parsing multipart requests by sending a specially crafted request.

References

nvd.nist.gov/vuln/detail/CVE-2020-8136 · ADVISORY
hackerone.com/reports/804772 · WEB

Más vulnerabilidades de fastify-multipart

Ver todo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

fastify-multipart

fastify

< 1.0.5

1.0.5

fastify-multipart

npm

< 1.0.5

1.0.5

Description

Prototype pollution vulnerability in fastify-multipart < 1.0.5 allows an attacker to crash fastify applications parsing multipart requests by sending a specially crafted request.

NVD description

Prototype pollution vulnerability in fastify-multipart < 1.0.5 allows an attacker to crash fastify applications parsing multipart requests by sending a specially crafted request.

Más vulnerabilidades de fastify-multipart

Ver todo →