CVE-2023-25576
1 advisory.
npm/@fastify/multipart CVE-2023-25576: high 7.5, EPSS 1.46%
Denial of service due to unlimited number of parts
Action: Upgrade @fastify/multipart to 6.0.1 or later.
npm i @fastify/multipart@6.0.1npm i @fastify/multipart@7.4.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 6.0.1 | - |
| 7.0.0 | 7.4.1 | - |
Fixed versions
| 6.0.1 | 7.4.1 |
Sources
- osv: GHSA-hpp2-2cr5-pf6g
- https://github.com/fastify/fastify-multipart/security/advisories/GHSA-hpp2-2cr5-pf6g
- https://nvd.nist.gov/vuln/detail/CVE-2023-25576
- https://github.com/fastify/fastify-multipart/commit/85be81bedf5b29cfd9fe3efc30fb5a17173c1297
- https://hackerone.com/reports/1816195
- https://github.com/fastify/fastify-multipart
- https://github.com/fastify/fastify-multipart/releases/tag/v6.0.1
- https://github.com/fastify/fastify-multipart/releases/tag/v7.4.1
CVE-2023-25576 · published · modified · JSON