VendorsExpressJSmulterall versions
Vulnerabilities

ExpressJS Multer 1.0.0 for Node.js

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

9CVEs
CVE-2026-3520
Multer vulnerable to Denial of Service via uncontrolled recursion
Published 2026-03-04 · Modified
8.7EPSS 0.009
CVE-2026-3304
Multer vulnerable to Denial of Service via incomplete cleanup
Published 2026-02-27 · Modified
8.7EPSS 0.008
CVE-2026-2359
Multer vulnerable to Denial of Service via resource exhaustion
Published 2026-02-27 · Modified
8.7EPSS 0.007
CVE-2026-77037
multer vulnerable to Denial of Service via file descriptor leak on aborted uploads
Published 2026-08-28 · Analyzed
7.5EPSS 0.006
CVE-2026-5038
multer vulnerable to Denial of Service via incomplete cleanup of aborted uploads
Published 2026-06-15 · Analyzed
7.5EPSS 0.005
CVE-2026-5079
multer vulnerable to Denial of Service via deeply nested field names
Published 2026-06-15 · Analyzed
7.5EPSS 0.005
CVE-2026-77078
multer vulnerable to Denial of Service via crafted multipart field names
Published 2026-08-28 · Analyzed
7.5EPSS 0.005
CVE-2026-82333
multer vulnerable to Denial of Service via oversized array index in field names
Published 2026-08-28 · Analyzed
7.5EPSS 0.005
CVE-2026-77063
multer vulnerable to file size limit bypass via async fileFilter race condition
Published 2026-08-28 · Analyzed
3.7EPSS 0.002