CVE WATCH / VULNERABILITY DETAIL
CVE-2026-113872
HIGHCVSS 7.5NVD feed
Published 22 October 2026 · tracked since 23 October 2026
Description
multer is a middleware for Node.js that handles multipart/form-data file uploads. In versions from 2.0.0 before 2.5.0, when multer is configured with an asynchronous fileFilter, a single request can crash the Node.js process. If the request is aborted while one file's asynchronous fileFilter is stil
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog