https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 17 Oct 2026 11:36:51 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-221574 EUVD-2026-221574 https://cve.radiocsirt.org/vuln/euvd-2026-221574 https://cve.radiocsirt.org/vuln/fkie_cve-2023-25576 <p>@fastify/multipart is a Fastify plugin to parse the multipart content-type. Prior to versions 7.4.1 and 6.0.1, @fastify/multipart may experience denial of service due to a number of situations in which an unlimited number of parts are accepted. This includes the multipart body parser accepting an unlimited number of file parts, the multipart body parser accepting an unlimited number of field parts, and the multipart body parser accepting an unlimited number of empty parts as field parts. This is fixed in v7.4.1 (for Fastify v4.x) and v6.0.1 (for Fastify v3.x). There are no known workarounds.</p> <p>@fastify/multipart is a Fastify plugin to parse the multipart content-type. Prior to versions 7.4.1 and 6.0.1, @fastify/multipart may experience denial of service due to a number of situations in which an unlimited number of parts are accepted. This includes the multipart body parser accepting an unlimited number of file parts, the multipart body parser accepting an unlimited number of field parts, and the multipart body parser accepting an unlimited number of empty parts as field parts. This is fixed in v7.4.1 (for Fastify v4.x) and v6.0.1 (for Fastify v3.x). There are no known workarounds.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-25576 https://cve.radiocsirt.org/vuln/ghsa-hpp2-2cr5-pf6g <p><strong>Affected:</strong> npm: @fastify/multipart</p> <p>### Impact</p> <p>* The multipart body parser accepts an unlimited number of file parts. * The multipart body parser accepts an unlimited number of field parts. * The multipart body parser accepts an unlimited number of empty parts as field parts.</p> <p>### Patches</p> <p>This is fixed in v7.4.1 (for Fastify v4.x) and v6.0.1 (for Fastify v3.x).</p> <p>### Workarounds</p> <p>There are no known workaround.</p> <p>### References</p> <p>Reported at https://hackerone.com/reports/1816195.</p> <p><strong>Affected:</strong> npm: @fastify/multipart</p> <p>### Impact</p> <p>* The multipart body parser accepts an unlimited number of file parts. * The multipart body parser accepts an unlimited number of field parts. * The multipart body parser accepts an unlimited number of empty parts as field parts.</p> <p>### Patches</p> <p>This is fixed in v7.4.1 (for Fastify v4.x) and v6.0.1 (for Fastify v3.x).</p> <p>### Workarounds</p> <p>There are no known workaround.</p> <p>### References</p> <p>Reported at https://hackerone.com/reports/1816195.</p> https://cve.radiocsirt.org/vuln/ghsa-hpp2-2cr5-pf6g https://cve.radiocsirt.org/vuln/gsd-2023-25576 gsd-2023-25576 https://cve.radiocsirt.org/vuln/gsd-2023-25576