HIGH🇵🇱 Wersja polska

CVE-2020-8136

CVSS 7.5v3.1pub. 2020-03-20upd. 2024-11-21

Prototype pollution vulnerability in fastify-multipart < 1.0.5 allows an attacker to crash fastify applications parsing multipart requests by sending a specially crafted request.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

  • Fastify Multipart

    APP
    Fastify
    < 1.0.5
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2023-25576HIGH7.5same product

@fastify/multipart is a Fastify plugin to parse the multipart content-type. Prior to versions 7.4.1 and 6.0.1,...

CVE-2021-23597HIGH7.5same product

This affects the package fastify-multipart before 5.3.1. By providing a name=constructor property it is still ...

CVE-2026-16117CRITICAL10.0PL ✓same vendor

Pominięcie rewrite prefiksu URL w @fastify/http-proxy – dostęp do ukrytych zasobów

CVE-2026-14198CRITICAL9.1PL ✓same vendor

Fastify/Middie: pominięcie middleware przez zakodowany slash w URL

CVE-2026-6556CRITICAL9.1PL ✓same vendor

Pominięcie middleware w @fastify/express — obejście uwierzytelniania