Denial of Service Risk in Multer Middleware by Express

CVE-2026-2359

What is CVE-2026-2359?

Multer, the middleware for handling multipart/form-data in node.js applications, contains a vulnerability that can lead to Denial of Service. An attacker can exploit this issue by dropping the connection during file uploads, which may result in resource exhaustion and impact the performance of applications using Multer. To mitigate this vulnerability, users are advised to upgrade to version 2.1.0 or later. There are currently no known workarounds available to address this issue.

References