- Latest release
- Not known: cve.now hasn't read this package's releases
- Newest unaffected release
- Not known without release data
- Advisories
- 3 · 2 high, 1 medium
- Weekly downloads
- 50.8M
- Dependents
- 4,676
- Registry
- npm
Advisories 3
- CVE-2026-74866Medium 5.8
@fastify/busboy vulnerable to CRLF injection via multipart Content-Disposition filename and name
Affected: fixed in 3.2.2.
- CVE-2026-19484High 7.5
@fastify/busboy vulnerable to Denial of Service via oversized multipart boundary
Affected: from 3.1.0, fixed in 3.2.1.
- CVE-2026-19481High 7.5
@fastify/busboy vulnerable to Denial of Service via prototype-named multipart part header
Affected: from 1.0.0, fixed in 3.2.1.