Debian/node-multiparty: high 7.5
multiparty is a Node.js library for parsing multipart/form-data request bodies. In versions from 2.1.0 up to but not including 4.3.1, the parser does not bound the amount of memory used while accumula
Action: Upgrade node-multiparty to 4.3.1+~4.2.1-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4.3.1+~4.2.1-1 | - |
Fixed versions
| 4.3.1+~4.2.1-1 |
Sources
- osv: DEBIAN-CVE-2026-87908#Debian:14/node-multiparty
- https://security-tracker.debian.org/tracker/CVE-2026-87908
published · modified · JSON