TI-2026-22785 CVE-2026-28525 · GHSA-hggv-rg65-qf4hSWUpdate Integer Underflow in Multipart Upload ParserPriority LOW 35SWUpdate contains an integer underflow vulnerability in the multipart upload parser in mongoose_multipart.c that allows unauthenticated attackers to cause a denial of service by sending a crafted HTTP POST request to /up…CVSS 4.0HIGH 8.2· Network · No auth · No interaction · EPSS 0.00316 · Published 2026-04-23 · Fixed CWE-125