TI-2023-10879 CVE-2023-25576 · GHSA-hpp2-2cr5-pf6g
@fastify/multipart vulnerable to DoS due to unlimited number of parts
Priority MEDIUM 42
@fastify/multipart is a Fastify plugin to parse the multipart content-type.
fastify
Records77All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical16CVSS 9.0–10.0
CVSS high37CVSS 7.0–8.9
Exploited now
fastify records in CISA KEVNo fastify vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
5 records in Fastify-multipart · all components
TI-2026-15210 CVE-2026-18549
@fastify/multipart vulnerable to Denial of Service via aborted upload after fileSize limit
Priority MEDIUM 40
@fastify/multipart is a multipart form-data parser for Fastify.
TI-2026-15859 CVE-2026-19474
@fastify/multipart vulnerable to Denial of Service via temporary file leak on aborted upload
Priority LOW 39
@fastify/multipart is a multipart form-data parser for Fastify.
TI-2021-06170 CVE-2021-23597 · GHSA-qh73-qc3p-rjv2
Denial of service (DoS) in fastify-multipart
Priority LOW 37
This affects the package fastify-multipart before 5.3.1.
TI-2020-06554 CVE-2020-8136 · GHSA-p9f8-gqjf-m75j
Uncontrolled resource consumption in fastify-multipart
Priority LOW 36
Prototype pollution vulnerability in fastify-multipart < 1.0.5 allows an attacker to crash fastify applications parsing multipart requests by sending a specially crafted request.