GHSA-xh3c-6gcq-g4rv
High · 7.5CVSS
7.5
EPSS
—
Published
May 18, 2026
CISA due date
—
The record
multiparty vulnerable to Denial of Service via Uncaught Exception in filename* parameter parsing
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| npm | multiparty | 0 | 4.3.0 |
Related vulnerabilities
- CVE-2026-8162 multiparty@4.2.3 and lower versions are vulnerable to denial of service via uncaught… Same vulnerability
- GHSA-65x3-rw7q-gx94 multiparty vulnerable to ReDoS via filename parsing Also affects multiparty
- GHSA-qxch-whhj-8956 multiparty: Denial of Service via Prototype Pollution leads to Uncaught Exception Also affects multiparty
- CVE-2026-8159 multiparty@4.2.3 and lower versions are vulnerable to denial of service via regular… Also affects multiparty
- CVE-2026-8161 multiparty@4.2.3 and lower versions are vulnerable to denial of service via uncaught… Also affects multiparty
- CVE-2026-109618 PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort… CWE-755
- CVE-2026-109619 PHP has various global state that temporarily points into request memory. CWE-755
- CVE-2026-105757 vLLM is an inference and serving engine for large language models. CWE-755