Denial of Service Vulnerability in Multer by Node.js Middleware
CVE-2026-3304
8.7HIGH
Key Information:
Badges
👾 Exploit Exists🟡 Public PoC
What is CVE-2026-3304?
A vulnerability within the Multer middleware, used for handling multipart form data in Node.js applications, allows an attacker to disrupt service by sending malformed requests. This can lead to resource exhaustion on the server, affecting the availability of applications that rely on Multer versions before 2.1.0. Users are strongly advised to upgrade to at least version 2.1.0 to mitigate this risk. No effective workarounds have been identified.
Affected Version(s)
multer 0.0.0 < 2.1.0
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.