Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

5 records

TI-2021-06170 CVE-2021-23597 · GHSA-qh73-qc3p-rjv2

Denial of service (DoS) in fastify-multipart

Priority LOW 37

This affects the package fastify-multipart before 5.3.1.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0203 Published 2022-02-11 Fixed in 5.3.1 CWE-1321
Priority LOW 36

Prototype pollution vulnerability in fastify-multipart < 1.0.5 allows an attacker to crash fastify applications parsing multipart requests by sending a specially crafted request.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01497 Published 2020-03-20 Fixed in 1.0.5 CWE-400