index.js in the Anton Myshenin aws-lambda-multipart-parser NPM package before 0.1.2 has a Regular Expression Denial of Service (ReDoS) issue via a crafted multipart/form-data boundary string.
CVSS 3.1HIGH 7.5·Network·No auth·No interaction·EPSS 0.01356·Published 2018-03-04·Fixed in 0.1.2CWE-20