GitHub Advisoryadvisory · npm

GHSA-p9f8-gqjf-m75j Uncontrolled Resource Consumption in fastify-multipart

MEDIUM Published 2021-05-06 Modified 2021-05-26 Official page ↗
Aliases
CVE-2020-8136
Ecosystem
npm
Packages
fastify-multipart
Severity
Moderate
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weaknesses
CWE-400
Reviewed
2021-05-05

Affected packages

• npm fastify-multipart: < 1.0.5 → fixed in 1.0.5

Description

Prototype pollution vulnerability in `fastify-multipart` < 1.0.5 allows an attacker to crash fastify applications parsing multipart requests by sending a specially crafted request.

Related

Alias · CVE (1)

  • CVE-2020-8136 Prototype pollution vulnerability in fastify-multipart < 1.0.5 allows an attacker to crash fastify applications parsing multipart requests… vulnerability

Weakness · CWE (1)

  • CWE-400 Uncontrolled Resource Consumption weakness

References