expressjs multer vulnerabilities

7 published CVEs name expressjs multer among the affected products.

Critical 0High 7Medium 0Low 0Not scored 0

CVEs per yearBy the year they were published

CVE-2026-3520
Multer vulnerable to Denial of Service via uncontrolled recursion
expressjs · multer
High8.7
CVE-2026-3304
Multer vulnerable to Denial of Service via incomplete cleanup
expressjs · multer
High8.7
CVE-2026-2359
Multer vulnerable to Denial of Service via resource exhaustion
expressjs · multer
High8.7
CVE-2025-7338
Multer vulnerable to Denial of Service via unhandled exception from malformed request
expressjs · multer
High7.5
CVE-2025-48997
Multer vulnerable to Denial of Service via unhandled exception
expressjs · multer
High8.7
CVE-2025-47944
Multer vulnerable to Denial of Service from maliciously crafted requests
expressjs · multer
High7.5
CVE-2025-47935
Multer vulnerable to Denial of Service via memory leaks from unclosed streams
expressjs · multer
High7.5