TI-2026-15867 CVE-2026-19484 · GHSA-xjh9-v7x6-24jw
@fastify/busboy vulnerable to Denial of Service via oversized multipart boundary
Priority MEDIUM 40
@fastify/busboy is a multipart form-data parser.
fastify
Records77All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical16CVSS 9.0–10.0
CVSS high37CVSS 7.0–8.9
Exploited now
fastify records in CISA KEVNo fastify vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
3 records in Fastify/busyboy · all components
TI-2026-15865 CVE-2026-19481 · GHSA-x8mw-p69m-v3mx
@fastify/busboy vulnerable to Denial of Service via prototype-named multipart part header
Priority LOW 39
@fastify/busboy is a multipart form-data parser.
TI-2026-52585 CVE-2026-74866 · GHSA-gxm5-99cw-xjw9
@fastify/busboy vulnerable to CRLF injection via multipart Content-Disposition filename and name
Priority LOW 32
@fastify/busboy is a multipart form-data parser for Node.js.