TI-2026-52585 CVE-2026-74866 · GHSA-gxm5-99cw-xjw9
@fastify/busboy vulnerable to CRLF injection via multipart Content-Disposition filename and name
Priority LOW 32
@fastify/busboy is a multipart form-data parser for Node.js.
Vulnerabilities
3 records
TI-2026-15867 CVE-2026-19484 · GHSA-xjh9-v7x6-24jw
@fastify/busboy vulnerable to Denial of Service via oversized multipart boundary
Priority MEDIUM 40
@fastify/busboy is a multipart form-data parser.
TI-2026-15865 CVE-2026-19481 · GHSA-x8mw-p69m-v3mx
@fastify/busboy vulnerable to Denial of Service via prototype-named multipart part header
Priority LOW 39
@fastify/busboy is a multipart form-data parser.