Uncontrolled Resource Consumption in fastify-multipart

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2020-8136 · ADVISORY
• hackerone.com/reports/804772 · WEB

fastify-multipart のその他の脆弱性

• CVE-2026-19474高 7.5@fastify/multipart is a multipart form-data parser for Fastify. In versions from 3.0.0 up to but not including 10.1.1, request.saveRequestFi…
• CVE-2026-18549高 7.5@fastify/multipart is a multipart form-data parser for Fastify. In versions from 5.3.0 up to but not including 10.1.1, when the busboy fileS…
• CVE-2023-25576高 7.5@fastify/multipart is a Fastify plugin to parse the multipart content-type. Prior to versions 7.4.1 and 6.0.1, @fastify/multipart may experi…
• CVE-2021-23597高 7.5This affects the package fastify-multipart before 5.3.1. By providing a name=constructor property it is still possible to crash the applicat…