CVE-2026-3304

Fixed in a distro release EPSS <1%CVSS 8.7

Multer is a node.js middleware for handling `multipart/form-data`. A vulnerability in Multer prior to version 2.1.0 allows an attacker to trigger a Denial of Service (DoS) by sending malformed requests, potentially causing resource exhaustion. Users should upgrade to version 2.1.0 to receive a patch. No known workarounds are available.

Published 2026-02-27 · CVE record · OSV

Products: expressjs multer, Red Hat Developer Hub 1.8, Red Hat Developer Hub 1.9, Logging Subsystem for Red Hat OpenShift, Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat Trusted Profile Analyzer, Red Hat Self-service automation portal 2

Fixed upstream

Distro releases