| Package | Affected versions | Patched versions |
|---|---|---|
| express-fileupload | < 1.1.6-alpha.6 | 1.1.6-alpha.6 |
Versions of express-fileupload prior to 1.1.6-alpha.6 are vulnerable to Denial of Service. The package causes server responses to be delayed (up to 30s in internal testing) if the request contains a large filename of . characters.
Upgrade to version 1.1.6-alpha.6 or later.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free