Описание
Multer is a node.js middleware for handling multipart/form-data. A vulnerability in Multer prior to version 2.1.1 allows an attacker to trigger a Denial of Service (DoS) by sending malformed requests, potentially causing stack overflow. Users should upgrade to version 2.1.1 to receive a patch. No known workarounds are available.
A denial of service flaw was found in Multer, a Node.js middleware for handling multipart/form-data. A remote attacker can send specially crafted malformed requests which may induce a stack overflow. This can lead to a Denial of Service (DoS) making the service unavailable.
Меры по смягчению последствий
Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Self-service automation portal 2 | ansible-automation-platform/automation-portal | Affected | ||
| Red Hat Developer Hub 1.8 | rhdh/rhdh-hub-rhel9 | Fixed | RHSA-2026:6174 | 30.03.2026 |
| Red Hat Developer Hub 1.9 | rhdh/rhdh-hub-rhel9 | Fixed | RHSA-2026:6802 | 07.04.2026 |
Показывать по
Ссылки на источники
Дополнительная информация
Статус:
EPSS
7.5 High
CVSS3
Связанные уязвимости
Multer is a node.js middleware for handling `multipart/form-data`. A vulnerability in Multer prior to version 2.1.1 allows an attacker to trigger a Denial of Service (DoS) by sending malformed requests, potentially causing stack overflow. Users should upgrade to version 2.1.1 to receive a patch. No known workarounds are available.
Multer Vulnerable to Denial of Service via Uncontrolled Recursion
EPSS
7.5 High
CVSS3