GHSA-qxch-whhj-8956
High · 7.5CVSS
7.5
EPSS
—
Published
May 18, 2026
CISA due date
—
The record
multiparty: Denial of Service via Prototype Pollution leads to Uncaught Exception
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| npm | multiparty | 0 | 4.3.0 |
Related vulnerabilities
- CVE-2026-8161 multiparty@4.2.3 and lower versions are vulnerable to denial of service via uncaught… Same vulnerability
- GHSA-65x3-rw7q-gx94 multiparty vulnerable to ReDoS via filename parsing Also affects multiparty
- GHSA-xh3c-6gcq-g4rv multiparty vulnerable to Denial of Service via Uncaught Exception in filename* parameter… Also affects multiparty
- CVE-2026-8162 multiparty@4.2.3 and lower versions are vulnerable to denial of service via uncaught… Also affects multiparty
- CVE-2026-8159 multiparty@4.2.3 and lower versions are vulnerable to denial of service via regular… Also affects multiparty
- CVE-2026-104852 GraphQL Tools provides utilities for building, stitching, and mocking GraphQL schemas. CWE-1321
- CVE-2026-104849 Tinypool is a minimal Node.js worker thread pool implementation. CWE-1321
- CVE-2026-104848 Tinypool is a minimal Node.js worker thread pool implementation. CWE-1321