All 7 CVE vulnerabilities found in multer, with AI-generated Chinese analysis, references, and POCs.
Vendor: expressjs
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-3520 | Multer vulnerable to Denial of Service via uncontrolled recursion CWE-674 | 7.5 | - | 2026-03-04 |
| CVE-2026-3304 | Multer vulnerable to Denial of Service via incomplete cleanup CWE-459 | 7.5 | - | 2026-02-27 |
| CVE-2026-2359 | Multer vulnerable to Denial of Service via resource exhaustion CWE-772 | 7.5 | - | 2026-02-27 |
| CVE-2025-7338 | Multer vulnerable to Denial of Service via unhandled exception from malformed request CWE-248 | 7.5 | High | 2025-07-17 |
| CVE-2025-48997 | Multer vulnerable to Denial of Service via unhandled exception CWE-248 | 7.5 | - | 2025-06-03 |
| CVE-2025-47944 | Multer vulnerable to Denial of Service from maliciously crafted requests CWE-248 | 7.5 | High | 2025-05-19 |
| CVE-2025-47935 | Multer vulnerable to Denial of Service via memory leaks from unclosed streams CWE-401 | 7.5 | High | 2025-05-19 |
All 7 known CVE vulnerabilities affecting multer with full Chinese analysis, references, and POCs where available.