~ / search / GHSA-p9f8-gqjf-m75j

GHSA-p9f8-gqjf-m75j

Uncontrolled Resource Consumption in fastify-multipart

Source: GitHub Advisory Database (reviewed) Moderate CVE-2020-8136

Packages

EcosystemPackageAffectedFixed in
npm fastify-multipart < 1.0.5 1.0.5

Details

As written in the advisory (Markdown source, shown as plain text).

Prototype pollution vulnerability in `fastify-multipart` < 1.0.5 allows an attacker to crash fastify applications parsing multipart requests by sending a specially crafted request.

References

External links from the advisory. They lead to third-party sites.