AIKIDO-2025-10435
multer is vulnerable to Uncaught Exception
75
High Risk
This Affects:
multerTL;DR
Multer is a node.js middleware for handling multipart/form-data. A vulnerability that is present starting in version 1.4.4-lts.1 and prior to version 2.0.0 allows an attacker to trigger a Denial of Service (DoS) by sending a malformed multi-part upload request. This request causes an unhandled exception, leading to a crash of the process. Users should upgrade to version 2.0.0 to receive a patch. No known workarounds are available.
Who does this affect?
You are affected if you are using a version that falls within the vulnerable range.
Background info
multer is vulnerable to Uncaught Exception in versions 1.4.4-lts.1 - 1.4.5-lts.2 and 1.4.4-lts.1 - 1.4.5-lts.1.
How to fix this
Upgrade the Multer library to the patch version.
Links
GitHub Release
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant