Ulises Gascón

Prototype Pollution Vulnerability in Lodash _.unset and _.omit functions

fast-uri vulnerable to host confusion via percent-encoded authority delimiters

fast-uri vulnerable to path traversal via percent-encoded dot segments

undici is vulnerable to Unhandled Exception in undici WebSocket Client Due to Invalid server_max_window_bits Validation

undici is vulnerable to Malicious WebSocket 64-bit length overflows undici parser and crashes the client

undici is vulnerable to Unbounded Memory Consumption in undici WebSocket permessage-deflate Decompression

morgan vulnerable to Log Forging via unneutralized control characters in :remote-user

Multer vulnerable to Denial of Service via uncontrolled recursion

multiparty vulnerable to Denial of Service via Uncaught Exception in filename* parameter parsing

multiparty vulnerable to Denial of Service via Prototype Pollution leading to Uncaught Exception