- Latest release
- Not known: cve.now hasn't read this package's releases
- Newest unaffected release
- Not known without release data
- Advisories
- 3 · 3 high
- Weekly downloads
- 1.1M
- Dependents
- 938
- Registry
- npm
Advisories 3
- CVE-2026-8162High 7.5
multiparty vulnerable to Denial of Service via Uncaught Exception in filename parameter parsing
Affected: fixed in 4.3.0.
- CVE-2026-8161High 7.5
multiparty vulnerable to Denial of Service via Prototype Pollution leading to Uncaught Exception
Affected: fixed in 4.3.0.
- CVE-2026-8159High 7.5
multiparty vulnerable to ReDoS via filename parsing
Affected: fixed in 4.3.0.