https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T07:48:11.228948+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2025-avi-0512 certfr-2025-avi-0512 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan… 2026-10-04T07:48:11.235307+00:00 certfr-2025-avi-0512 https://cve.radiocsirt.org/vuln/euvd-2026-241457 EUVD-2026-241457 2026-10-04T07:48:11.235342+00:00 EUVD-2026-241457 https://cve.radiocsirt.org/vuln/fkie_cve-2025-47935 fkie_cve-2025-47935 2026-10-04T07:48:11.235357+00:00

Multer is a node.js middleware for handling `multipart/form-data`. Versions prior to 2.0.0 are vulnerable to a resource exhaustion and memory leak issue due to improper stream handling. When the HTTP request stream emits an error, the internal `busboy` stream is not closed, violating Node.js stream safety guidance. This leads to unclosed streams accumulating over time, consuming memory and file descriptors. Under sustained or repeated failure conditions, this can result in denial of service, requiring manual server restarts to recover. All users of Multer handling file uploads are potentially impacted. Users should upgrade to 2.0.0 to receive a patch. No known workarounds are available.

 https://cve.radiocsirt.org/vuln/ghsa-44fp-w29j-9vj5 GHSA-44fp-w29j-9vj5 — Multer vulnerable to Denial of Service via memory leaks from unclosed streams 2026-10-04T07:48:11.235387+00:00

Affected: npm: multer

### Impact

Multer <2.0.0 is vulnerable to a resource exhaustion and memory leak issue due to improper stream handling. When the HTTP request stream emits an error, the internal `busboy` stream is not closed, violating Node.js stream safety guidance.

This leads to unclosed streams accumulating over time, consuming memory and file descriptors. Under sustained or repeated failure conditions, this can result in denial of service, requiring manual server restarts to recover. All users of Multer handling file uploads are potentially impacted.

### Patches

Users should upgrade to `2.0.0`

### Workarounds

None

### References

- https://github.com/expressjs/multer/pull/1120 - https://github.com/expressjs/multer/commit/2c8505f207d923dd8de13a9f93a4563e59933665

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1388 WID-SEC-W-2025-1388 — IBM App Connect Enterprise: Mehrere Schwachstellen ermöglichen Denial of Service 2026-10-04T07:48:11.235419+00:00

Ein Angreifer kann mehrere Schwachstellen in IBM App Connect Enterprise ausnutzen, um einen Denial of Service Angriff durchzuführen.