Priority LOW 39
multer is a middleware for Node.js that handles multipart/form-data file uploads.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00442 · Published 2026-10-22 · Partial fix · 2.5.0 CWE-248
Priority LOW 31
multer is a Node.js middleware for handling multipart/form-data uploads.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00532 · Published 2026-09-14 · Fixed in 2.4.0 CWE-400
Priority LOW 39
multer is a middleware for handling multipart/form-data in Node.js.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00367 · Published 2026-08-28 · Partial fix · 2.3.0 CWE-400
Priority LOW 39
multer is a middleware for handling multipart/form-data in Node.js.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00488 · Published 2026-08-28 · Partial fix · 2.3.0 CWE-248
Priority LOW 17
multer is a middleware for handling multipart/form-data in Node.js.
CVSS 3.1LOW 3.7· Network · No auth · No interaction · EPSS 0.00233 · Published 2026-08-28 · Partial fix · 2.3.0 CWE-362
Priority LOW 39
multer is a middleware for handling multipart/form-data in Node.js.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00457 · Published 2026-08-28 · Partial fix · 2.3.0 CWE-400
Priority LOW 39
Impact: multer versions 2.0.0-alpha.1 through 2.1.1 and 3.0.0-alpha.1 are vulnerable to a Denial of Service when using diskStorage.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00367 · Published 2026-06-15 · Partial fix · 2.2.0, 3.0.0-alpha.2 CWE-459
Priority LOW 39
Impact: multer versions 1.0.0 through 2.1.1 and 3.0.0-alpha.1 are vulnerable to a Denial of Service via deeply nested field names in multipart form data.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00279 · Published 2026-06-15 · Partial fix · 2.2.0, 3.0.0-alpha.2 CWE-400
Priority MEDIUM 45
Multer is a node.js middleware for handling `multipart/form-data`.
CVSS 4.0HIGH 8.7· Network · No auth · No interaction · EPSS 0.00818 · Published 2026-03-04 · Partial fix · 2.1.1 CWE-674
Priority MEDIUM 45
Multer is a node.js middleware for handling `multipart/form-data`.
CVSS 4.0HIGH 8.7· Network · No auth · No interaction · EPSS 0.00738 · Published 2026-02-27 · Partial fix · 2.1.0 CWE-459
Priority MEDIUM 45
Multer is a node.js middleware for handling `multipart/form-data`.
CVSS 4.0HIGH 8.7· Network · No auth · No interaction · EPSS 0.00738 · Published 2026-02-27 · Partial fix · 2.1.0 CWE-772
Priority MEDIUM 40
Multer is a node.js middleware for handling `multipart/form-data`.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00808 · Published 2025-07-17 · Partial fix · 2.0.2 CWE-248
Priority MEDIUM 44
Multer is a node.js middleware for handling `multipart/form-data`.
CVSS 4.0HIGH 8.7· Network · No auth · No interaction · EPSS 0.00482 · Published 2025-06-03 · Partial fix · 2.0.1 CWE-248
Priority MEDIUM 40
Multer is a node.js middleware for handling `multipart/form-data`.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00811 · Published 2025-05-19 · Fixed in 2.0.0 CWE-248
Priority MEDIUM 40
Multer is a node.js middleware for handling `multipart/form-data`.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00795 · Published 2025-05-19 · Fixed in 2.0.0 CWE-401
Priority MEDIUM 55
URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Express.
CVSS 3.1MEDIUM 4.7· Network · No auth · User interaction · EPSS 0.0046 · Published 2024-10-03 · Partial fix · 4.0.0, 4.0.0-rc1 CWE-601
Priority LOW 38
basic-auth-connect is Connect's Basic Auth middleware in its own module.
CVSS 4.0HIGH 8.7· Network · No auth · No interaction · EPSS 0.00522 · Published 2024-09-30 · Partial fix · 1.1.0 CWE-208
Priority MEDIUM 40
body-parser is Node.js body parsing middleware.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00824 · Published 2024-09-10 · Partial fix · 1.20.3 CWE-405
Priority LOW 24
serve-static serves static files.
CVSS 3.1MEDIUM 5.0· Network · No auth · User interaction · EPSS 0.00631 · Published 2024-09-10 · Partial fix · 1.16.0, 2.1.0 CWE-79
Priority LOW 23
Express.js minimalist web framework for node.
CVSS 3.1MEDIUM 5.0· Network · No auth · User interaction · EPSS 0.00486 · Published 2024-09-10 · Partial fix · 4.20.0, 5.0.0 CWE-79
Priority LOW 29
Express.js minimalist web framework for node.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00786 · Published 2024-03-25 · Partial fix · 4.19.0, 5.0.0-beta.3 +1 CWE-1286
Priority LOW 35
method-override is a module used by the Express.js framework to let you use HTTP verbs such as PUT or DELETE in places where the client doesn't support it.
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.01196 · Published 2018-06-07 · Fixed in 2.3.10 CWE-400