Denial of Service Risk in Multer Middleware by Express

CVE-2026-2359

What is CVE-2026-2359?

Multer, the middleware for handling multipart/form-data in node.js applications, contains a vulnerability that can lead to Denial of Service. An attacker can exploit this issue by dropping the connection during file uploads, which may result in resource exhaustion and impact the performance of applications using Multer. To mitigate this vulnerability, users are advised to upgrade to version 2.1.0 or later. There are currently no known workarounds available to address this issue.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References