https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 23:54:09 +0000 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0746 certfr-2025-avi-0746 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0746 https://cve.radiocsirt.org/vuln/euvd-2026-247785 EUVD-2026-247785 https://cve.radiocsirt.org/vuln/euvd-2026-247785 https://cve.radiocsirt.org/vuln/fkie_cve-2025-7338 <p>Multer is a node.js middleware for handling `multipart/form-data`. A vulnerability that is present starting in version 1.4.4-lts.1 and prior to version 2.0.2 allows an attacker to trigger a Denial of Service (DoS) by sending a malformed multi-part upload request. This request causes an unhandled exception, leading to a crash of the process. Users should upgrade to version 2.0.2 to receive a patch. No known workarounds are available.</p> <p>Multer is a node.js middleware for handling `multipart/form-data`. A vulnerability that is present starting in version 1.4.4-lts.1 and prior to version 2.0.2 allows an attacker to trigger a Denial of Service (DoS) by sending a malformed multi-part upload request. This request causes an unhandled exception, leading to a crash of the process. Users should upgrade to version 2.0.2 to receive a patch. No known workarounds are available.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-7338 https://cve.radiocsirt.org/vuln/ghsa-fjgf-rc76-4x9p <p><strong>Affected:</strong> npm: multer</p> <p>### Impact</p> <p>A vulnerability in Multer versions &gt;= 1.4.4-lts.1, &lt; 2.0.2 allows an attacker to trigger a Denial of Service (DoS) by sending a malformed request. This request causes an unhandled exception, leading to a crash of the process.</p> <p>### Patches</p> <p>Users should upgrade to `2.0.2`</p> <p>### Workarounds</p> <p>None</p> <p><strong>Affected:</strong> npm: multer</p> <p>### Impact</p> <p>A vulnerability in Multer versions &gt;= 1.4.4-lts.1, &lt; 2.0.2 allows an attacker to trigger a Denial of Service (DoS) by sending a malformed request. This request causes an unhandled exception, leading to a crash of the process.</p> <p>### Patches</p> <p>Users should upgrade to `2.0.2`</p> <p>### Workarounds</p> <p>None</p> https://cve.radiocsirt.org/vuln/ghsa-fjgf-rc76-4x9p https://cve.radiocsirt.org/vuln/rhsa-2025:14090 <p>rhdh: Red Hat Developer Hub user permissions pbkdf2: pbkdf2 silently returns predictable key material multer: Multer Denial of Service golang.org/x/net/proxy: golang.org/x/net/http/httpproxy: HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net http-proxy-middleware: Always-Incorrect Control Flow Implementation in http-proxy-middleware http-proxy-middleware: Improper Check for Unusual or Exceptional Conditions in http-proxy-middleware tar-fs: tar-fs has issue where extract can write outside the specified dir with a specific tarball multer: Multer vulnerable to Denial of Service via unhandled exception @node-saml/node-saml: Node-SAML Signature Verification Vulnerability</p> <p>rhdh: Red Hat Developer Hub user permissions pbkdf2: pbkdf2 silently returns predictable key material multer: Multer Denial of Service golang.org/x/net/proxy: golang.org/x/net/http/httpproxy: HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net http-proxy-middleware: Always-Incorrect Control Flow Implementation in http-proxy-middleware http-proxy-middleware: Improper Check for Unusual or Exceptional Conditions in http-proxy-middleware tar-fs: tar-fs has issue where extract can write outside the specified dir with a specific tarball multer: Multer vulnerable to Denial of Service via unhandled exception @node-saml/node-saml: Node-SAML Signature Verification Vulnerability</p> https://cve.radiocsirt.org/vuln/rhsa-2025:14090 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1854 <p>Ein Angreifer kann mehrere Schwachstellen in HCL BigFix Komponente ausnutzen, um Sicherheitsvorkehrungen zu umgehen, um einen Denial of Service Angriff durchzuführen, um Daten zu manipulieren, um Informationen offenzulegen, und um einen Cross-Site Scripting Angriff durchzuführen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in HCL BigFix Komponente ausnutzen, um Sicherheitsvorkehrungen zu umgehen, um einen Denial of Service Angriff durchzuführen, um Daten zu manipulieren, um Informationen offenzulegen, und um einen Cross-Site Scripting Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1854