GHSA-fjgf-rc76-4x9pHighCVSS 7.5

Multer vulnerable to Denial of Service via unhandled exception from malformed request

Published
July 17, 2025
Last Modified
July 17, 2025

🔗 CVE IDs covered (1)

CVE-2025-7338 →

📋 Description

Impact

A vulnerability in Multer versions >= 1.4.4-lts.1, < 2.0.2 allows an attacker to trigger a Denial of Service (DoS) by sending a malformed request. This request causes an unhandled exception, leading to a crash of the process.

Patches

Users should upgrade to 2.0.2

Workarounds

None

🎯 Affected products1

  • npm/multer:>= 1.4.4-lts.1, < 2.0.2

🔗 References (5)