GHSA-fjgf-rc76-4x9p
GitHub Security Advisory
Multer vulnerable to Denial of Service via unhandled exception from malformed request
✓ GitHub Reviewed
HIGH
Has CVE
Advisory Details
### Impact
A vulnerability in Multer versions >= 1.4.4-lts.1, < 2.0.2 allows an attacker to trigger a Denial of Service (DoS) by sending a malformed request. This request causes an unhandled exception, leading to a crash of the process.
### Patches
Users should upgrade to `2.0.2`
### Workarounds
None
Affected Packages
npm
multer
Affected versions:
1.4.4-lts.1
(fixed in 2.0.2)
Related CVEs
Key Information
7.5
/10
Dataset
Last updated: July 26, 2025 6:37 AM
Data from GitHub Advisory Database. This information is provided for research and educational purposes.