VendorsExpressJSmulter3.0.0
Vulnerabilities

ExpressJS Multer 1.0.0 for Node.js 3.0.0

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

2CVEs
CVE-2026-5038
multer vulnerable to Denial of Service via incomplete cleanup of aborted uploads
Published 2026-06-15 · Analyzed
7.5EPSS 0.003
CVE-2026-5079
multer vulnerable to Denial of Service via deeply nested field names
Published 2026-06-15 · Analyzed
7.5EPSS 0.003