CVE WATCH / VULNERABILITY DETAIL
CVE-2026-117531
MEDIUMCVSS 5.9NVD feed
Published 2 November 2026 · tracked since 2 November 2026
Description
@fastify/multipart is the multipart form-data and file upload plugin for the Fastify web framework. In versions 5.3.0 through 10.1.6, the plugin does not propagate a parser error to the file stream when a request body ends inside a file part with no closing boundary, even though the Content-Length i
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog