Denial of Service Vulnerability in Multer by Node.js Middleware
CVE-2026-3304
Key Information:
Badges
What is CVE-2026-3304?
A vulnerability within the Multer middleware, used for handling multipart form data in Node.js applications, allows an attacker to disrupt service by sending malformed requests. This can lead to resource exhaustion on the server, affecting the availability of applications that rely on Multer versions before 2.1.0. Users are strongly advised to upgrade to at least version 2.1.0 to mitigate this risk. No effective workarounds have been identified.
Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
multer 0.0.0 < 2.1.0
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.